---
title: "Revoke an API key"
method: DELETE
path: "/v1/api-keys/{id}"
tags: ["API Keys"]
---

# Revoke an API key

`DELETE /v1/api-keys/{id}`

## Request

- Base URL: `https://api.letmepost.dev`
- URL: `https://api.letmepost.dev/v1/api-keys/{id}`
- Auth: none required

Soft-revoke. The key is invalidated immediately; the row stays for audit. Already-revoked keys 404.

## Path parameters

- `id` string, uuid, required

## Response `200`

Key revoked.

- object
  - `id` string, required
  - `revokedAt` string, date-time, required

## Other responses

- `401`: `unauthenticated` — missing or invalid Bearer key.
- `404`: `not_found` — the resource does not exist in the caller's organization (or, for profile-scoped keys, in the caller's profile).
- `429`: `rate_limited` — too many requests. Inspect `X-RateLimit-Limit` (static ceiling) and the IETF-draft `RateLimit-*` headers (sliding-window remaining/reset) before retrying.

---

[API](https://skmtc.dev/letmepost/apis/letmepost-dev-api.md) · [All operations](https://skmtc.dev/letmepost/apis/letmepost-dev-api/llms.txt) · [OpenAPI document](https://skmtc.dev/letmepost/apis/letmepost-dev-api/revisions/f6659001f96b?raw)