Revoke an API key

DELETE

/api-keys/{keyId}

API Keys

Revoke (permanently disable) an API key.

Authentication: Requires JWT authentication with api_keys scope.

Once revoked, the API key cannot be used for authentication and cannot be re-activated.

Request

Authorization

API Key

Add parameter in header

X-API-Key

Example:

X-API-Key: ********************

JWT Bearer

Add the parameter

Authorization

to Headers

Example:

Authorization: ********************

Path Params

🟢200

application/json

API key revoked successfully

Body

🟠400

🟠401Unauthorized

🟠403Forbidden

🟠404

Request Example

Shell

JavaScript

Java

Swift

curl --location --request DELETE 'https://gvazyknvkqdeuzmrnuwu.supabase.co/functions/v1/api-keys/' \
--header 'X-API-Key: <api-key>'

Response Example

200 - Success

{
    "success": true,
    "data": {
        "message": "API key revoked successfully"
    }
}

Modified at 2025-12-30 00:32:05