---
title: "Revoke API Key"
method: DELETE
path: "/v1/keys/{identity}"
tags: ["Payment SDK API Key Management"]
---

# Revoke API Key

`DELETE /v1/keys/{identity}`

Permanently revoke an API key. Once revoked, the key can no longer be used for authentication.
This action is **irreversible**. Revoked keys remain visible via List API Keys when `include_revoked=true`.

## Path parameters

- `identity` string, required

## Response `200`

Successful operation

- RevokeApiKeyResponse — Revoke Api Key Response
  - `success` boolean, required — Always true on successful revocation.

## Other responses

- `400` — Malformed request
- `401` — Missing or invalid JWT token
- `403` — Insufficient permissions to revoke this key
- `404` — API key not found
- `409` — API key is already revoked
- `500` — Internal server error

---

[API](https://skmtc.net/cloudbeds/apis/cloudbeds-api.md) · [All operations](https://skmtc.net/cloudbeds/apis/cloudbeds-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/cloudbeds/cloudbeds-api/revisions/2faa857793e8/schema)