---
title: "Revoke an API key"
method: DELETE
path: "/v2/api-keys/{id}"
tags: ["API Keys"]
---

# Revoke an API key

`DELETE /v2/api-keys/{id}`

## Request

- Base URL: `https://api.lilt.com`
- URL: `https://api.lilt.com/v2/api-keys/{id}`
- Auth: HTTP basic

Revoke an API key, preventing further authentication.

The operation is idempotent — revoking an already-revoked key still returns `204`. The caller must own the key or hold `apiKey.write` on the current organization.

## Path parameters

- `id` string, required

## Response `204`

API key revoked (or was already revoked).

## Other responses

- `400`: The authenticated user has no active organization.
- `401`: The request is not authenticated.
- `403`: The caller does not own the key and lacks `apiKey.write`.
- `404`: API key not found, or belongs to another organization.
- `default`: Unexpected error.

## Changes

- **2026-11-03** `99b66cc7808d`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/lilt/apis/lilt-api/changes/v2/api-keys/:id/delete.md)

---

[API](https://skmtc.dev/lilt/apis/lilt-api.md) - [All operations](https://skmtc.dev/lilt/apis/lilt-api/llms.txt) - [OpenAPI document](https://skmtc.dev/lilt/apis/lilt-api/revisions/66424bd9c6de?raw)