---
title: "Delete an approval key"
method: DELETE
path: "/management/api_users/{userId}/approval_keys/{keyId}"
tags: ["Approvals (Beta)"]
---

# Delete an approval key

`DELETE /management/api_users/{userId}/approval_keys/{keyId}`

## Request

- Base URL: `https://api.fireblocks.io/v1`
- URL: `https://api.fireblocks.io/v1/management/api_users/{userId}/approval_keys/{keyId}`
- Auth: none declared
- TypeScript: <https://skmtc.dev/fireblocks/apis/fireblocks-api/docs/management/api_users/:userId/approval_keys/:keyId/delete.ts> (a function with typed inputs; its response is checked against the schema)

Delete (revoke) an approval public key for the specified API user. The deletion may require approval: it always does for the API user's last key or another user's key. In that case the response carries `ccrIdPendingDeletion`, the key reads as `APPROVAL_API_KEY_STATUS_PENDING_DELETION` and stays active until the request is approved. A rejected request leaves the key enabled.

Endpoint Permission: Owner, Admin, Non-Signing Admin, Approver, Signer, Security Admin.

## Path parameters

- `userId` string, required
- `keyId` string, required

## Headers

- `Idempotency-Key` string

## Response `200`

The approval key was deleted, or its deletion is pending approval.

- DeleteApprovalApiKeyResponse: The result of deleting an approval API key.
  - `ccrIdPendingDeletion` string, required: Always returned. An empty string when the key was deleted immediately. Otherwise, the ID of the approval request that must be approved before the key is removed; the key stays active until then. The request appears in `GET /v1/approvals`.

## Other responses

- `409`: Another approval key request for this API user is already pending approval.
- `default`: Error Response

---

[API](https://skmtc.dev/fireblocks/apis/fireblocks-api.md) - [All operations](https://skmtc.dev/fireblocks/apis/fireblocks-api/llms.txt) - [OpenAPI document](https://skmtc.dev/fireblocks/apis/fireblocks-api/revisions/4eba9965659a?raw)