> ## Documentation Index
> Fetch the complete documentation index at: https://docs.timbrix.mx/llms.txt
> Use this file to discover all available pages before exploring further.

# Delete API Key

> Permanently delete an API key

Revokes and deletes an API key.

## Permissions

User must be **owner** or **admin**.

## What Happens

* API key is immediately revoked
* Future requests with this key will fail with 401
* Key cannot be restored (create a new one if needed)

## Example

```bash theme={null}
curl -X DELETE http://localhost:3001/api/organizations/acme-corp/api-keys/abc123 \
  -H "Authorization: Bearer <token>"
```

## Use Cases

* Rotate API keys for security
* Remove compromised keys
* Clean up unused keys


## OpenAPI

````yaml DELETE /organizations/{organizationId}/api-keys/{id}
openapi: 3.1.0
info:
  title: Timbrix API
  description: >-
    REST API with OAuth2 server for managing organizations, members, and
    webhooks
  version: '1.0'
  contact: {}
servers:
  - url: http://sandbox.mintlify.com
    description: Sandbox environment
  - url: http://localhost:3001/api
    description: Local development
security: []
tags:
  - name: organizations
    description: Organization management endpoints
  - name: oauth
    description: OAuth2 authentication and authorization
  - name: webhooks
    description: Webhook configuration and delivery
  - name: users
    description: User information endpoints
  - name: api-keys
    description: API Keys management and validation
paths:
  /organizations/{organizationId}/api-keys/{id}:
    delete:
      tags:
        - api-keys
      summary: Delete API key
      description: Permanently delete an API key
      operationId: ApiKeysController_delete
      parameters:
        - name: organizationId
          required: true
          in: path
          schema:
            type: string
        - name: id
          required: true
          in: path
          schema:
            type: string
      responses:
        '204':
          description: API key deleted successfully
        '401':
          description: Authentication required. Provide a valid bearer token.
        '403':
          description: Access denied. Only owners and admins can delete API keys.
        '404':
          description: API key not found
      security:
        - bearer: []
components:
  securitySchemes:
    bearer:
      scheme: bearer
      bearerFormat: JWT
      type: http

````