---
title: "Revoke, but retain, a provider key"
method: DELETE
path: "/v1/execution/provider-keys/{kid}"
---

# Revoke, but retain, a provider key

`DELETE /v1/execution/provider-keys/{kid}`

## Request

- Base URL: `https://api.decionis.com`
- URL: `https://api.decionis.com/v1/execution/provider-keys/{kid}`
- Auth: HTTP bearer

A revoked key verifies no further receipts or attestations, and a grant admitted by an attestation under it can no longer be claimed. Its metadata remains, so what was recorded against it stays explicable.

## Path parameters

- `kid` string, required

## Query parameters

- `org_id` string, uuid

## Response `200`

Key revoked

- ExecutionProviderKeyRevocationResponse
  - `service` 'decionis', required
  - `kid` string, required
  - `revoked` true, required

## Other responses

- `400`: Structured API error
- `401`: Structured API error
- `403`: Structured API error
- `404`: Structured API error

---

[API](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api.md) · [All operations](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api/llms.txt) · [OpenAPI document](https://skmtc.dev/decionis/apis/decionis-policy-evaluation-api/revisions/357f5e459d0c?raw)