# Revoke a CMS API key

Canonical page: https://docs.ovok.com/api/payload-cms-api-keys/revoke-a-cms-api-key

`DELETE /v1/cms/api-keys/{id}`

Revokes one of your current project's CMS API keys. Public delivery stops taking it at once.

**Auth:** bearer token of a project admin. The caller must also be a Practitioner, an admin or hold the System Owner access policy.
**Scope:** the caller's project (from the token).

## Behaviour

- `id` is a key's `id` from `GET /v1/cms/api-keys`; `default` revokes the default key.
- A key the project does not hold returns 404 `CMS_API_KEY_NOT_FOUND`.
- A 409 means the project changed while the server wrote. Retry.
- Public responses a CDN already cached may still be served for up to a minute.
- The answer is 204.

## Example

```bash
curl -X DELETE 'https://api.sandbox.ovok.com/v1/cms/api-keys/default' \
  -H 'Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpYXQiOjE3NjcyNjg4MDAsImV4cCI6MTc2NzI3MjQwMH0.Ql3B_ztDvctlyZ2z0vp4sl3ExXRQGkzmxdmTAqxNzZk'
```