---
title: "Revoke an agent key"
method: DELETE
path: "/agents/{id}/keys/{keyId}"
tags: ["Agents"]
---

# Revoke an agent key

`DELETE /agents/{id}/keys/{keyId}`

Credential-revoking, so it requires the console sign-in session with step-up assurance; bearer tokens are rejected.

## Path parameters

- `id` string, required
- `keyId` string, required

## Response `200`

The revoked key

- object
  - `key` object, required
    - `id` string, required
    - `name` string, nullable, required
    - `keyThumbprint` string, required
    - `status` 'active' | 'revoked', required
    - `createdAt` string, date-time, required
    - `lastSeenAt` string, date-time, nullable, required
    - `revokedAt` string, date-time, nullable, required

---

[API](https://skmtc.dev/catena/apis/catena-api.md) · [All operations](https://skmtc.dev/catena/apis/catena-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/catena/catena-api/revisions/f0a9c99d458d/schema)