---
title: "Revoke one grant key (owner-only)"
method: DELETE
path: "/projects/v1/{project_id}/grant-keys/{key_id}"
tags: ["Org"]
---

# Revoke one grant key (owner-only)

`DELETE /projects/v1/{project_id}/grant-keys/{key_id}`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/projects/v1/{project_id}/grant-keys/{key_id}`
- Auth: API key in header `SIGN-IN-WITH-X`

Owner-only. Sets `revoked_at` on this key; the grant and its other keys stay. Immediate for subsequent requests. For base_disposable_eoa, refills stop and a sweep is attempted (on-chain bare-key risk is bounded to the prefunded balance). Audited.

## Path parameters

- `project_id` string, required
- `key_id` string, uuid, required

## Headers

- `SIGN-IN-WITH-X` string, required

## Response `200`

Grant key revoked

- object
  - `status` 'revoked'
  - `key_id` string, uuid

## Other responses

- `403`: Owner role required (FORBIDDEN)
- `404`: No active grant key with that id on this project (GRANT_KEY_NOT_FOUND)

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)