---
title: "Revoke a specific API key"
method: DELETE
path: "/api/v1/api-keys/{id}"
tags: ["api-keys"]
---

# Revoke a specific API key

`DELETE /api/v1/api-keys/{id}`

Revokes a specific API key by changing its status to 'revoked'. The key will no longer be valid for authentication but remains visible in API key lists for audit purposes.

## Path parameters

- `id` string, required

## Response `200`

OK. Key successfully revoked.

- ApiKey
  - `id` string, required — Unique identifier for the API key
  - `name` string, required — User-friendly name for the API key
  - `description` string — Optional description providing context about the key's purpose
  - `username` string — Username that owns this API key
  - `groups` string[] — User's groups at creation time (immutable snapshot for authorization)
  - `creationDate` string, date-time, required — When the API key was created
  - `expirationDate` string, date-time — When the API key expires (empty for permanent keys)
  - `status` 'active' | 'revoked' | 'expired', required — Current status of the API key
  - `lastUsedAt` string, date-time — When the API key was last used for validation
  - `subscription` string — Name of the subscription associated with this API key

## Other responses

- `401` — Unauthorized response.
- `403` — Forbidden. User trying to revoke another user's key.
- `404` — Not Found. API key not found.
- `500` — Internal Server Error

---

[API](https://skmtc.net/opendatahub-io/apis/maas-bff-api.md) · [All operations](https://skmtc.net/opendatahub-io/apis/maas-bff-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/opendatahub-io/maas-bff-api/versions/9112415ceeca/schema)