VoidhashDocs
DevelopersHelp centerGuidesAPI reference
Dashboard
Essentials
API overview
Authentication
Event capture
Push device API
Webhooks
Webhook delivery
Webhook events
Projects & keys
Projects
API keys
Audit log
Customers & access
Persons
Products
Perks
Sandbox
Paywalls
Paywalls
Paywall locations
Components
Component registry
Assets
Experiments & flags
Experiments
Feature flags
Analytics & events
Analytics
Analytics alerts
Events
Ingest policy
VoidQL
Tracking domains
Ads
Ads
Ad accounts
Meta measurement
Payments & stores
Payment providers
Payment provider products
Purchase history imports
Payment sources
Webhooks & notifications
Webhooks
Push notifications
Push configurations
Automations
Organization & team
Organizations
Members
Invitations
Billing
Your account
Profile
Session
Notices
Connected apps
Terms of Service
Developer tools
Schema
SDK
List API keys
Create an API key
Retrieve an API key
Update an API key
Delete an API key
Roll an API key

Delete an API key

Deletes a secret key; requests made with it fail from then on.

Only a person signed in to the Voidhash dashboard can do this; a secret key, a CLI key or an MCP client cannot.

Guide: API keys

DELETE
/api/v1/projects/{projectId}/api-keys/{apiKeyId}

Authorization

AuthorizationBearer <token>

A project secret key: vh_sk_... for production, vh_sk_test_... for test. Keep it on your servers.

In: header

Path parameters

projectId*string

The project's id, proj_.... A secret key works only in the project it belongs to.

apiKeyId*string

The key's id: api_sk_... for a secret key, api_pk_... for a publishable key.

Examples

curl -X DELETE "https://api.voidhash.com/api/v1/projects/proj_tz4a98xxat96iws9zmbrgj3a/api-keys/api_sk_r6t9y2u5i8o1p4a7s0d3f6g9" \  -H "Authorization: Bearer vh_sk_..."
Empty
{  "error": {    "type": "invalid_request",    "code": "publishable_key_not_editable",    "message": "A publishable key cannot be edited, rotated or deleted: your apps ship with it. Only secret keys can.",    "param": "apiKeyId"  }}
{  "error": {    "type": "unauthenticated",    "code": "invalid_api_key",    "message": "This secret key is not valid."  }}
{  "error": {    "type": "permission_denied",    "code": "permission_denied",    "message": "Insufficient permissions."  }}
{  "error": {    "type": "not_found",    "code": "project_not_found",    "message": "There is no project proj_tz4a98xxat96iws9zmbrgj3a, or this credential cannot use it.",    "param": "projectId"  }}
{  "error": {    "type": "internal",    "code": "internal_error",    "message": "Something went wrong on our side. Try again, and contact support with the Request-Id header if it keeps failing."  }}

Response body

application/json

application/json

application/json

application/json

application/json

Errors

StatustypecodeWhen
400invalid_requestpublishable_key_not_editableFor a publishable key, which apps already ship with.

It can also fail with the errors every operation shares, such as unauthenticated; see Errors.

More in API keys

  • List API keys GET
  • Create an API key POST
  • Retrieve an API key GET
  • Update an API key PATCH
  • Roll an API key POST

Something wrong or missing on this page? Tell us by email or on Discord.

PreviousUpdate an API keyNextRoll an API key

On this page

AuthorizationPath parametersExamplesResponse bodyErrorsMore in API keys