---
title: "Bulk revoke API keys for a user"
method: POST
path: "/api/v1/api-keys/bulk-revoke"
tags: ["api-keys"]
---

# Bulk revoke API keys for a user

`POST /api/v1/api-keys/bulk-revoke`

Revokes all active API keys for a specific user. Regular users can only bulk revoke their own keys. Admins can bulk revoke any user's keys.

## Request body

- object
  - `username` string, required — Username whose keys should be revoked

## Response `200`

OK response.

- object
  - `revokedCount` integer — Number of keys that were revoked
  - `message` string — Success message

## Other responses

- `400` — Bad Request. Invalid request.
- `401` — Unauthorized response.
- `403` — Forbidden. User trying to revoke another user's keys.
- `500` — Internal Server Error

---

[API](https://skmtc.net/opendatahub-io/apis/maas-bff-api.md) · [All operations](https://skmtc.net/opendatahub-io/apis/maas-bff-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/opendatahub-io/maas-bff-api/versions/9112415ceeca/schema)