dev.cocore.account.deleteApiKey
{
"$type": "com.atproto.lexicon.schema",
"defs": {
"main": {
"description": "Hard-delete one of the authenticated account's API keys, removing the row entirely (no audit trail recovery afterwards). For most flows revokeApiKey is preferable; use this to clean up revoked or expired keys you no longer want listed. Scoped to the caller's DID. Idempotent: deleting an unknown key returns `deleted: false`.",
"errors": [
{
"description": "No valid session cookie or bearer key was presented.",
"name": "AuthRequired"
}
],
"input": {
"encoding": "application/json",
"schema": {
"properties": {
"id": {
"description": "The `id` of the key to delete (from createApiKey or listApiKeys).",
"maxLength": 200,
"minLength": 1,
"type": "string"
}
},
"required": [
"id"
],
"type": "object"
}
},
"output": {
"encoding": "application/json",
"schema": {
"properties": {
"deleted": {
"description": "True if a key owned by the caller was deleted by this call; false if no matching key existed.",
"type": "boolean"
}
},
"required": [
"deleted"
],
"type": "object"
}
},
"type": "procedure"
}
},
"id": "dev.cocore.account.deleteApiKey",
"lexicon": 1
}
Metadata
- DID
-
did:plc:5quuhkmwe2q4k3azfsgg7kdz - CID
-
bafyreiczcjki46rzapxyx443tvig2os6jx433golgm55kr7ran2xp7tlnm - Indexed At
- 2026-06-19 13:44 UTC
- AT-URI
-
at://did:plc:5quuhkmwe2q4k3azfsgg7kdz/com.atproto.lexicon.schema/dev.cocore.account.deleteApiKey
Similar Lexicons
Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.
-
dev.cocore.account.revokeApiKey procedure
Revoke one of the authenticated account's API keys. The key stops authenticating immediately, but the row is retained with `revokedAt` set so it stays visible in listApiKeys as a revoked key (audit trail). Use deleteApi…
-
social.coves.aggregator.revokeApiKey procedure
Revoke the authenticated aggregator's API key. After revocation, the aggregator must complete OAuth flow again to create a new API key. This action cannot be undone.
-
List every API key belonging to the authenticated account, most-recently-created first. The owning DID is derived from the credential presented (session cookie or `Authorization: Bearer cocore-...`); there is no way to …
-
rip.pds.account.deleteAccount procedure
Delete an account the caller minted, ahead of its expiry. The identity is retired as it would have been on expiry.
-
Shared type definitions for dev.cocore.account.* methods.