---
title: "Disable DNSSEC on a DNS Zone"
method: DELETE
path: "/dnszone/{id}/dnssec"
tags: ["DNS Zone", "DNSSEC"]
---

# Disable DNSSEC on a DNS Zone

`DELETE /dnszone/{id}/dnssec`

## Request

- Base URL: `https://api.bunny.net`
- URL: `https://api.bunny.net/dnszone/{id}/dnssec`
- Auth: one of:
  - API key in header `AccessKey`
  - API key in header `Authorization`
- TypeScript: <https://skmtc.dev/bunny/apis/bunny-net-api/docs/dnszone/:id/dnssec/delete.ts> (a function with typed inputs; its response is checked against the schema)

## Path parameters

- `id` integer, required

## Response `200`

Disables DNSSEC for the DNS Zone with the given ID

- DnsSecDsRecordModel
  - `Enabled` boolean
  - `DsRecord` string, nullable
  - `Digest` string, nullable
  - `DigestType` string, nullable
  - `Algorithm` integer
  - `PublicKey` string, nullable
  - `KeyTag` integer
  - `Flags` integer
  - `DsConfigured` boolean

## Other responses

- `401`: The request authorization failed
- `404`: The DNS Zone with the requested ID does not exist
- `500`: Internal Server Error

## Changes

- **2026-10-27** `2096a6606d8d`: 2 info
  - the security scope `ScopedApiKey` was added to the endpoint's security scheme `AccessKey`
  - the security scope `ScopedApiKey` was added to the endpoint's security scheme `bearer`

[Operation history](https://skmtc.dev/bunny/apis/bunny-net-api/changes/dnszone/:id/dnssec/delete.md)

---

[API](https://skmtc.dev/bunny/apis/bunny-net-api.md) - [All operations](https://skmtc.dev/bunny/apis/bunny-net-api/llms.txt) - [OpenAPI document](https://skmtc.dev/bunny/apis/bunny-net-api/revisions/2b06f94dbfbf?raw)