---
title: "Revoke an API key"
method: DELETE
path: "/user/api-keys/{id}"
---

# Revoke an API key

`DELETE /user/api-keys/{id}`

## Request

- Base URL: `https://rendry.io/api/v1`
- URL: `https://rendry.io/api/v1/user/api-keys/{id}`
- Auth: HTTP bearer

For the signed-in owner, in a browser session. Requests with the key stop working at once. A connector (MCP/OAuth) token is refused on every account-management door with 403 `browser_session_required`: a connector does MCP work, it does not manage keys.

## Path parameters

- `id` string, required

## Headers

- `X-End-User` string
- `X-Rendry-Account` string

## Response `200`

Revoked

## Other responses

- `401`: Not signed in, or an API key was used
- `403`: `error` is `browser_session_required`: a connector (MCP/OAuth) token was used
- `404`: `error` is `api_key_not_found`: this account has no key with that id — it never existed, was revoked already, or belongs to another account. Nothing was changed.

---

[API](https://skmtc.dev/rendry/apis/rendry-api.md) · [All operations](https://skmtc.dev/rendry/apis/rendry-api/llms.txt) · [OpenAPI document](https://skmtc.dev/rendry/apis/rendry-api/revisions/c4fb572c26c9?raw)