# Revoke sub-account API key

> Revoke sub-account API key. Requires a parent project API key; sub-account API keys receive HTTP 403.

`DELETE https://api.zavu.dev/v1/sub-accounts/{id}/api-keys/{keyId}`

Revoke sub-account API key. Requires a parent project API key; sub-account API keys receive HTTP 403.

## Parameters

- `id` (path, string, required): Sub-account ID.
- `keyId` (path, string, required): API key ID.

## Responses

### 204

API key revoked.

### 400

The API key is already revoked.

- `code` (string, required)
- `message` (string, required)
- `details` (object)

### 401

Unauthorized.

- `code` (string, required)
- `message` (string, required)
- `details` (object)

### 403

Forbidden. Sub-account API keys cannot manage sub-accounts.

- `code` (string, required)
- `message` (string, required)
- `details` (object)

### 404

Sub-account or API key not found.

- `code` (string, required)
- `message` (string, required)
- `details` (object)

## Example

```bash
curl -X DELETE "https://api.zavu.dev/v1/sub-accounts/id_abc123/api-keys/key_abc123" \
  -H "Authorization: Bearer $ZAVUDEV_API_KEY"
```

```typescript
import Zavudev from "@zavudev/sdk";

const zavu = new Zavudev({ apiKey: process.env.ZAVUDEV_API_KEY });

await zavu.subAccounts.apiKeys.revoke("key_abc123", {
  id: "id_abc123",
});
```