---
title: "Revoke an API key"
method: POST
path: "/v1/me/api-keys/{id}/revoke"
tags: ["Account"]
---

# Revoke an API key

`POST /v1/me/api-keys/{id}/revoke`

## Request

- Base URL: `https://api.vatnode.dev`
- URL: `https://api.vatnode.dev/v1/me/api-keys/{id}/revoke`
- Auth: API key in cookie `better-auth.session_token`

Revokes (soft-deletes) a live API key. Equivalent outcome to
`DELETE /v1/me/api-keys/{id}`.

## Path parameters

- `id` string, required

## Response `200`

The key was revoked.

- SuccessResponse
  - `success` boolean, required
  - `message` string

## Other responses

- `401`: No valid session (`UNAUTHORIZED`), or the account has been deleted (`ACCOUNT_DELETED`).
- `404`: The addressed resource does not exist, or is not owned by the authenticated caller. Returns the standard error envelope with code `NOT_FOUND`. Ownership and existence are deliberately not distinguished, so a resource belonging to another account is reported as missing rather than forbidden.
- `500`: An unexpected server error occurred. Returns the standard error envelope with code `INTERNAL_ERROR` and a `requestId` for support correlation. The failing request had no side effects the caller can rely on; retry is safe for idempotent operations.

---

[API](https://skmtc.dev/vatnode/apis/vatnode-api.md) · [All operations](https://skmtc.dev/vatnode/apis/vatnode-api/llms.txt) · [OpenAPI document](https://skmtc.dev/vatnode/apis/vatnode-api/revisions/c65828db2037?raw)