---
title: "Terminally revoke an agent and its keys"
method: DELETE
path: "/agents/{agentId}"
tags: ["Agents"]
---

# Terminally revoke an agent and its keys

`DELETE /agents/{agentId}`

## Request

- Base URL: `https://app.arkova.ai/api/v1`
- URL: `https://app.arkova.ai/api/v1/agents/{agentId}`
- Auth: one of:
  - HTTP bearer
  - API key in header `X-API-Key`
  - HTTP bearer

JWT callers must be organization admins. API keys require an active, unexpired, same-organization agents:manage credential.

## Response `200`

Agent revoked atomically

- AgentRevocationResult
  - `status` 'revoked', required
  - `agent_id` string, uuid, required

## Other responses

- `401`: Missing, malformed, invalid, revoked, or expired credential
- `403`: Role, agents:manage, tenant, delegation, or provider scope ceiling denied
- `404`: Agent not found in caller tenant
- `409`: More than one credential was presented
- `503`: Lifecycle mutation temporarily unavailable; the client may retry after the indicated delay but must not retry automatically

---

[API](https://skmtc.dev/arkova/apis/arkova-verification-api.md) · [All operations](https://skmtc.dev/arkova/apis/arkova-verification-api/llms.txt) · [OpenAPI document](https://skmtc.dev/arkova/apis/arkova-verification-api/revisions/a14858d1efd4?raw)