---
title: "Delete Secret"
method: DELETE
path: "/cloud/v2/universes/{universeId}/secrets/{secretId}"
tags: ["Universes"]
---

# Delete Secret

`DELETE /cloud/v2/universes/{universeId}/secrets/{secretId}`

## Request

- Base URL: `https://apis.roblox.com`
- URL: `https://apis.roblox.com/cloud/v2/universes/{universeId}/secrets/{secretId}`
- Auth: one of:
  - API key in header `x-api-key`
  - OAuth 2
    - Authorization code: `https://apis.roblox.com/oauth/v1/authorize`
    - Token URL: `https://apis.roblox.com/oauth/v1/token`

Permanently deletes a secret from a universe.

Only the owner of the universe can delete secrets. For group-owned universes, only the group owner or authorized
members can delete secrets.

This operation is irreversible. Make sure you no longer need the secret before deleting it.

## Path parameters

- `universeId` integer, required
- `secretId` string, required

## Response `200`

OK

## Other responses

- `400`: Bad Request
- `403`: Forbidden
- `404`: Not Found

## Changes

- **2026-10-20** `93616db823f3`: 3 breaking
  - the `status` response's property type changed from `string` to `integer`, and format from no format to `int32` for status `400`
  - the `status` response's property type changed from `string` to `integer`, and format from no format to `int32` for status `403`
  - the `status` response's property type changed from `string` to `integer`, and format from no format to `int32` for status `404`

[Operation history](https://skmtc.dev/roblox/apis/roblox-api/changes/cloud/v2/universes/:universeId/secrets/:secretId/delete.md)

---

[API](https://skmtc.dev/roblox/apis/roblox-api.md) - [All operations](https://skmtc.dev/roblox/apis/roblox-api/llms.txt) - [OpenAPI document](https://skmtc.dev/roblox/apis/roblox-api/revisions/bcfdc20689cd?raw)