---
title: "Revoke a key"
method: DELETE
path: "/api/keys/{id}"
tags: ["auth"]
---

# Revoke a key

`DELETE /api/keys/{id}`

## Request

- Base URL: `https://www.orgo.ai`
- URL: `https://www.orgo.ai/api/keys/{id}`
- Auth: HTTP bearer

Only a key within the caller’s own access. A computer’s own key is revoked only by a session or a full access key; the computer it was on forgets it. A key for one computer that could control it (full access or Control write) changes that computer’s VNC password.

## Response `200`

{ success: true }

## Other responses

- `403`: key_escalation, key_permission, client_key, or account_key_required (a key for one computer, revoked by a workspace key).
- `404`: Not a key of the caller’s, or outside its scope.
- `429`: Over one of the account's rate limits (rate_limited): `limit` names it, `retry_after` and Retry-After say how many seconds to wait. Limits are per account (the workspace owner when the request acts on a computer or a workspace) and set by its plan (x-rate-limits).

## Changes

- **2026-10-30** `afb6f0ee1aac`: 1 info
  - added the non-success response with the status `429`
- **2026-10-22** `8797b380fe7d`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/orgo/apis/orgo-api/changes/api/keys/:id/delete.md)

---

[API](https://skmtc.dev/orgo/apis/orgo-api.md) - [All operations](https://skmtc.dev/orgo/apis/orgo-api/llms.txt) - [OpenAPI document](https://skmtc.dev/orgo/apis/orgo-api/revisions/e4c1e7379fa5?raw)