---
title: "Revoke API keys"
method: POST
path: "/api-keys/bulk-revoke"
tags: ["API Keys"]
---

# Revoke API keys

`POST /api-keys/bulk-revoke`

## Request

- Base URL: `https://xquik.com/api/v1`
- URL: `https://xquik.com/api/v1/api-keys/bulk-revoke`
- Auth: API key in cookie `__Host-xquik_session`

Revokes up to 100 of your API keys at once & lists the IDs it revoked, newest first. IDs of other accounts' keys or unknown keys are skipped.

## Request body

- object
  - `ids` string[], required

## Response `200`

API keys revoked

- object
  - `revoked` string[], required: IDs of the revoked keys, newest first.

## Other responses

- `400`: Invalid input. A value past its maxLength gets this answer, & the message names the field & its limit.
- `401`: Unauthenticated
- `403`: An API key or OAuth token called a route that needs a dashboard session. Sign in at dashboard.xquik.com/account instead.
- `429`: Too many requests right now. Each user gets 500 reads a second. Each minute allows 120 writes & 60 deletes. `x_api_rate_limited` means X limits this read for now. Neither answer costs anything. Wait for the seconds in `Retry-After`, then retry.

## Changes

- **2026-10-22** `cfc837dd4f9d`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/xquik-dev/apis/xquik-api/changes/api-keys/bulk-revoke/post.md)

---

[API](https://skmtc.dev/xquik-dev/apis/xquik-api.md) · [All operations](https://skmtc.dev/xquik-dev/apis/xquik-api/llms.txt) · [OpenAPI document](https://skmtc.dev/xquik-dev/apis/xquik-api/revisions/7a59e6ce1d8a?raw)