---
title: "Revoke an API key"
method: DELETE
path: "/v1/keys/{key_id}"
tags: ["Keys"]
---

# Revoke an API key

`DELETE /v1/keys/{key_id}`

## Request

- Base URL: `https://dnsmint.com/api`
- URL: `https://dnsmint.com/api/v1/keys/{key_id}`
- Auth: HTTP bearer

Revocation takes effect on the key's next request. A key may revoke itself, which is what a program does when it detects its own compromise. Revoking a key does not revoke keys it created: rotation is mint-then-revoke, so a cascade would destroy the replacement.

## Path parameters

- `key_id` string, required

## Response `200`

Revoked

- object
  - `key_id` string
  - `revoked` boolean

## Other responses

- `401`: Missing, invalid or expired key
- `403`: Key does not carry keys:write
- `404`: No live key with that id in this team

---

[API](https://skmtc.dev/dnsmint/apis/dnsmint-api.md) · [All operations](https://skmtc.dev/dnsmint/apis/dnsmint-api/llms.txt) · [OpenAPI document](https://skmtc.dev/dnsmint/apis/dnsmint-api/revisions/98fb1f87725a?raw)