---
title: "Revoke an API key"
method: DELETE
path: "/v1/api-keys/{id}"
tags: ["API Keys"]
---

# Revoke an API key

`DELETE /v1/api-keys/{id}`

## Request

- Base URL: `https://api.signvoy.com`
- URL: `https://api.signvoy.com/v1/api-keys/{id}`
- Auth: one of:
  - API key in header `X-Workspace-Id`
  - HTTP bearer

Immediately and permanently revokes the key. Any request using it will start failing at once. This cannot be undone.

## Path parameters

- `id` string, uuid, required

## Response `200`

The revoked key

- ApiKeyDto
  - `id` string, uuid, required: Unique API key identifier
  - `name` string, required: Human-readable label
  - `prefix` string, required: Non-secret leading segment of the key
  - `last4` string, required: Last 4 characters of the key
  - `lastUsedAt` string, date-time, nullable: When the key was last used to authenticate a request
  - `expiresAt` string, date-time, nullable: When the key expires (null = never)
  - `revoked` boolean, required: Whether the key has been revoked
  - `createdAt` string, date-time, required: Creation timestamp

## Other responses

- `403`: Not a workspace owner or admin
- `404`: API key not found

---

[API](https://skmtc.dev/signvoy/apis/signvoy-api.md) · [All operations](https://skmtc.dev/signvoy/apis/signvoy-api/llms.txt) · [OpenAPI document](https://skmtc.dev/signvoy/apis/signvoy-api/revisions/003cabc7cfe2?raw)