> ## Documentation Index > Fetch the complete documentation index at: https://docs.shoply.gg/llms.txt > Use this file to discover all available pages before exploring further. # Revoke the current key > Revokes the key in the request, for good: from the next request on it is refused as any revoked key is, and it is listed as revoked under Developers, API Keys. Answers the key as it now is. This is how a program that was handed a key gives it back when it is done with it, as `shoply logout` does. An app's token is not revoked here: an app gives its token back at `POST /v1/oauth/revoke`. Any live key may ask it, whatever its permissions. Any live API key may call this, whatever its permissions. ## OpenAPI ````yaml /api-reference/openapi.json delete /key openapi: 3.1.0 info: title: Shoply API version: '1' description: >- Everything a store's own server can do with a secret API key: its catalogue, orders, customers, marketing, finance and the rest of what the dashboard does. And the Customer API, which a buyer's own device asks with a token of theirs. servers: - url: https://api.shoply.gg/v1 security: - apiKey: [] tags: - name: API key - name: Store - name: Domain - name: Payment methods - name: Analytics - name: Storefronts - name: Storefront code - name: Payment Routing - name: Custom payment methods - name: Products - name: Product pictures - name: Stock - name: Categories - name: Upsells - name: Subscriptions - name: Orders - name: Invoices - name: Reviews - name: Coupons - name: Coupon categories - name: Coupon pop-up - name: Sales - name: Blog - name: Search settings - name: Redirects - name: Sitemap - name: Cart Recovery - name: Email Marketing - name: Email Templates - name: Customers - name: Affiliates - name: Support Tickets - name: Teams - name: Resellers - name: Blacklist - name: Allowlist - name: Fraud protection - name: Disputes - name: Finance - name: Tax - name: Expenses - name: Expense setup - name: API requests - name: Webhook endpoints - name: Webhook deliveries - name: Customer API paths: /key: delete: tags: - API key summary: Revoke the current key description: >- Revokes the key in the request, for good: from the next request on it is refused as any revoked key is, and it is listed as revoked under Developers, API Keys. Answers the key as it now is. This is how a program that was handed a key gives it back when it is done with it, as `shoply logout` does. An app's token is not revoked here: an app gives its token back at `POST /v1/oauth/revoke`. Any live key may ask it, whatever its permissions. Any live API key may call this, whatever its permissions. operationId: key.destroy parameters: - $ref: '#/components/parameters/IdempotencyKey' responses: '200': description: It worked. content: application/json: schema: type: object properties: success: type: boolean message: nullable: true code: nullable: true data: type: object properties: id: type: string name: type: string prefix: type: string scopes: type: array items: type: string allowedIps: type: - array - object allowedDomains: type: - array - object expiresAt: nullable: true expired: type: boolean createdAt: type: string lastUsedAt: type: string revokedAt: type: string example: success: true message: null code: null data: id: c5e53fcf-9c50-4410-abd5-e366d4ade76e name: Order sync prefix: shoply_sk_3f9a1c scopes: - store.read - store.write allowedIps: [] allowedDomains: [] expiresAt: null expired: false createdAt: '2026-11-09T11:32:33Z' lastUsedAt: '2026-11-09T11:32:33Z' revokedAt: '2026-11-09T11:32:36Z' '401': $ref: '#/components/responses/NoKey' '403': $ref: '#/components/responses/NotAllowed' '404': $ref: '#/components/responses/NotFound' '422': $ref: '#/components/responses/Refused' '429': $ref: '#/components/responses/TooMany' x-codeSamples: - lang: javascript label: Node.js source: | import Shoply from "@shoplygg/node"; const shoply = new Shoply({ apiKey: process.env.SHOPLY_API_KEY }); const result = await shoply.key.destroy(); - lang: php label: PHP source: | getenv('SHOPLY_API_KEY')]); $result = $shoply->key->destroy(); - lang: python label: Python source: | import shoply client = shoply.Client() # reads SHOPLY_API_KEY result = client.key.destroy() components: parameters: IdempotencyKey: name: Idempotency-Key in: header required: false description: >- A word of your own for this one change, up to 180 letters, digits, dots, dashes, underscores and colons. Sent again with the same key, the request is not carried out twice: the first answer comes back, with `Idempotent-Replay: true`. schema: type: string responses: NoKey: description: >- No API key was sent, or the one sent is not a live key: `api_key_required`, `invalid_api_key`. content: application/json: schema: $ref: '#/components/schemas/Refusal' NotAllowed: description: >- The key is real and may not do this: `missing_scope` (with `requiredScope`), `ip_not_allowed`, `account_unavailable`, or `dashboard_only` for something only a person in the dashboard may do. content: application/json: schema: $ref: '#/components/schemas/Refusal' NotFound: description: >- There is no such thing in this store: `not_found`. A store that is not the key's own is answered the same way. content: application/json: schema: $ref: '#/components/schemas/Refusal' Refused: description: >- The request was understood and not carried out. `validation_failed` says what is wrong with each field under `errors`; other codes are the route's own. content: application/json: schema: $ref: '#/components/schemas/Refusal' TooMany: description: >- The key has used up its budget for now: `rate_limited`. `Retry-After` says how many seconds to wait. content: application/json: schema: $ref: '#/components/schemas/Refusal' schemas: Refusal: type: object properties: success: type: boolean example: false message: type: string description: What is wrong, in words for a person. code: type: string description: What is wrong, as a word that does not change. data: nullable: true errors: type: object description: >- For `validation_failed`: what is wrong with each field, by the field's name. additionalProperties: type: string required: - success - message - code securitySchemes: apiKey: type: http scheme: bearer description: >- A secret API key, made under Developers in the dashboard: `Authorization: Bearer shoply_sk_...` ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.