---
title: "Permanently delete an already-revoked API key"
method: DELETE
path: "/users/api-keys/{id}/permanent"
tags: ["API Keys"]
---

# Permanently delete an already-revoked API key

`DELETE /users/api-keys/{id}/permanent`

## Request

- Base URL: `https://api.atako.ai`
- URL: `https://api.atako.ai/users/api-keys/{id}/permanent`
- Auth: HTTP bearer

Company-admin only. The key must be revoked first (`DELETE /users/api-keys/{id}`) — deleting an active key is refused.

## Path parameters

- `id` string, required

## Response `200`

- object
  - `success` boolean

## Other responses

- `401`: Missing, malformed, or invalid bearer token / API key, or revoked session (SESSION_REVOKED).
- `403`: The caller does not have the required role/permission.
- `404`: Not found, or the caller is not authorized to access this resource.
- `409`: Revoke the key before deleting it — the key is still active.

---

[API](https://skmtc.dev/atako/apis/atako-api.md) · [All operations](https://skmtc.dev/atako/apis/atako-api/llms.txt) · [OpenAPI document](https://skmtc.dev/atako/apis/atako-api/revisions/aa555c56fbd7?raw)