---
title: "Revoke an API key"
method: DELETE
path: "/api/v1/keys/{id}"
tags: ["Keys"]
---

# Revoke an API key

`DELETE /api/v1/keys/{id}`

## Request

- Base URL: `https://volunteerreminder.com`
- URL: `https://volunteerreminder.com/api/v1/keys/{id}`
- Auth: HTTP bearer

Soft-revoke one of this account's API keys. Idempotent per key; a revoked key can never authenticate again. Requires the `keys:manage` scope. Returns 404 for an unknown id, an already-revoked key, or another account's key.

## Path parameters

- `id` integer, required: The id of the key to revoke (from POST/GET /api/v1/keys).

## Response `200`

The key was revoked.

- RevokedApiKey
  - `id` integer, required
  - `revoked` true, required: Always true on success.

## Other responses

- `400`: The request failed schema validation (`validation_error`). On the import endpoints, also when the text is UTF-16 (Excel "Unicode Text"; `unsupported_encoding`): resend it as CSV UTF-8.
- `401`: Missing or invalid API key.
- `403`: The API key lacks a scope required by this endpoint.
- `404`: The requested resource does not exist.

---

[API](https://skmtc.dev/volunteerreminder/apis/volunteerreminder-api.md) · [All operations](https://skmtc.dev/volunteerreminder/apis/volunteerreminder-api/llms.txt) · [OpenAPI document](https://skmtc.dev/volunteerreminder/apis/volunteerreminder-api/revisions/f8e7e26ba96f?raw)