---
title: "Revoke a user API key"
method: DELETE
path: "/v0/users/{user}/keys/{key}"
tags: ["users", "keys"]
---

# Revoke a user API key

`DELETE /v0/users/{user}/keys/{key}`

Revoke an API key for a user. Revocation is terminal: a revoked key can no longer authenticate any request, and the revocation cannot be undone. Only the authenticated user themselves and server admins have access to this endpoint. When authenticated with a user API key, only that key itself may be revoked: a key can always destroy itself, but it cannot revoke the user's other keys. Authenticate with a JWT (user session token) to revoke other keys.

## Path parameters

- `key` string, uuid, required
- `user` string, required

## Response `204`

successful deletion

## Other responses

- `4XX` — Error
- `5XX` — Error

## Changes

- **2026-06-12** `43de45aea19d` — 1 info
  - endpoint added
- **2026-03-20** `36c8ad753527` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/bencherdev/apis/bencher-api/changes/v0/users/:user/keys/:key/delete.md)

---

[API](https://skmtc.dev/bencherdev/apis/bencher-api.md) · [All operations](https://skmtc.dev/bencherdev/apis/bencher-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/bencherdev/bencher-api/revisions/c469055e8d0c/schema)