---
title: "Revoke an agent API key"
method: POST
path: "/api/agents/keys/revoke"
tags: ["agents"]
---

# Revoke an agent API key

`POST /api/agents/keys/revoke`

## Request

- Base URL: `https://api.depixapp.com`
- URL: `https://api.depixapp.com/api/agents/keys/revoke`
- Auth: none required

Revokes one of the agent's own keys. Auth: agent keypair signature. Rejected when the merchant is suspended.

## Request body

- AgentKeyRevokeRequest: Revoke one of the agent's own keys.
  - `id` string, required: Id of the key to revoke.

## Response `200`

Revoked (idempotent).

- AgentKeyRevokeResponse: Revocation result.
  - `response` object, required: Envelope.
    - `id` string, required: The revoked key id.
    - `revoked` boolean, required: Always true.

## Other responses

- `400`: Missing key id.
- `401`: Signature chain failed or unknown agent key.
- `403`: Blocked or suspended.
- `404`: Key not found for this agent.
- `429`: Rate limited (per-IP, per-key or per-merchant window). Retry after `retry_after` seconds (also in the Retry-After header).
- `503`: Nonce store unavailable (fail-CLOSED) OR the agent program is globally disabled (agents_disabled).

---

[API](https://skmtc.dev/depixapp/apis/depix-api.md) · [All operations](https://skmtc.dev/depixapp/apis/depix-api/llms.txt) · [OpenAPI document](https://skmtc.dev/depixapp/apis/depix-api/revisions/04094536dd0f?raw)