---
title: "Revoke an API key"
method: DELETE
path: "/api-keys/{id}"
tags: ["Account"]
---

# Revoke an API key

`DELETE /api-keys/{id}`

## Request

- Base URL: `https://api.varg.ai/v2`
- URL: `https://api.varg.ai/v2/api-keys/{id}`
- Auth: HTTP bearer

Requires an app session (Supabase JWT), not an API key.

## Path parameters

- `id` string, uuid, required

## Response `200`

Key revoked

- object
  - `deleted` boolean
  - `revoked_at` string, date-time

## Other responses

- `400`: Id is not a UUID (`invalid_request`)
- `401`: Missing or invalid API key / JWT
- `403`: Only app sessions can manage API keys (API keys and connected applications are rejected)
- `404`: Unknown API key

## Changes

- **2026-10-20** `43bcf5ea398d`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/varg/apis/varg-api/changes/api-keys/:id/delete.md)

---

[API](https://skmtc.dev/varg/apis/varg-api.md) · [All operations](https://skmtc.dev/varg/apis/varg-api/llms.txt) · [OpenAPI document](https://skmtc.dev/varg/apis/varg-api/revisions/09d49a6d852f?raw)