---
title: "Revoke sub-account API key"
method: DELETE
path: "/v1/sub-accounts/{id}/api-keys/{keyId}"
tags: ["Sub-Accounts"]
---

# Revoke sub-account API key

`DELETE /v1/sub-accounts/{id}/api-keys/{keyId}`

## Request

- Base URL: `https://api.zavu.dev`
- URL: `https://api.zavu.dev/v1/sub-accounts/{id}/api-keys/{keyId}`
- Auth: HTTP bearer

Revoke sub-account API key. Requires a parent project API key; sub-account API keys receive HTTP 403.

## Path parameters

- `id` string, required
- `keyId` string, required

## Response `204`

API key revoked.

## Other responses

- `400`: The API key is already revoked.
- `401`: Unauthorized.
- `403`: Forbidden. Sub-account API keys cannot manage sub-accounts.
- `404`: Sub-account or API key not found.

## Changes

> 80 revisions in range; 1 not diffed.

- **2026-05-15** `3e45958691da`: 1 info
  - added the non-success response with the status `403`
- **2026-03-17** `dca8af164271`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/zavudev/apis/zavu-unified-messaging-layer-api/changes/v1/sub-accounts/:id/api-keys/:keyId/delete.md)

---

[API](https://skmtc.dev/zavudev/apis/zavu-unified-messaging-layer-api.md) - [All operations](https://skmtc.dev/zavudev/apis/zavu-unified-messaging-layer-api/llms.txt) - [OpenAPI document](https://skmtc.dev/zavudev/apis/zavu-unified-messaging-layer-api/revisions/75bc777b0ffb?raw)