---
title: "Delete OAuth API key"
method: DELETE
path: "/oauth2/api-key/{externalId}"
tags: ["OAuth API Keys"]
---

# Delete OAuth API key

`DELETE /oauth2/api-key/{externalId}`

The endpoint deletes a partner-issued API key owned by the authenticated OAuth2 client. The deletion triggers an email notification to the user. The endpoint applies to active keys — disabled keys must be removed by the user from the WhiteBIT dashboard.

**Required scope:** `apikeys.delete`.

**Region availability:** The endpoint is available on the global server (`https://whitebit.com`) only.

## Path parameters

- `externalId` string, uuid, required

## Response `200`

Successful deletion.

- object
  - `data` unknown[]
    - unknown

## Other responses

- `401` — Missing or invalid Bearer token, or token does not carry the `apikeys.delete` scope.
- `403` — The key does not belong to the authenticated OAuth2 client.
- `404` — Key not found.

---

[API](https://skmtc.net/whitebit/apis/whitebit-private-http-api-v4.md) · [All operations](https://skmtc.net/whitebit/apis/whitebit-private-http-api-v4/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/whitebit/whitebit-private-http-api-v4/revisions/76c9def9942f/schema)