Skip to content

Revoke a signing key (org owner only)

DELETE
/api/signing-keys/{key_id}
curl --request DELETE \
--url 'https://example.com/api/signing-keys/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0?organization_id=2489E9AD-2EE2-8E00-8EC9-32D5F69181C0' \
--header 'Authorization: Bearer <token>'

Mark the signing key as revoked.

Sets is_active=False and revoked_at=now(). Requires ?confirm=delete (422 confirmation_required otherwise). Returns 204 on success, 404 if the key does not exist or does not belong to the requesting organisation. Re-importing the same public key later reactivates it.

key_id
required
Key Id
string format: uuid
organization_id
required
Organization Id
string format: uuid
confirm
Any of:
string

Must be ‘delete’

Successful Response

Validation Error

Media type application/json
HTTPValidationError
object
detail
Detail
Array<object>
ValidationError
object
ctx
Context
object
input
Input
loc
required
Location
Array
msg
required
Message
string
type
required
Error Type
string
Example generated
{
"detail": [
{
"ctx": {},
"input": "example",
"loc": [
"example"
],
"msg": "example",
"type": "example"
}
]
}