## Delete an application

`DELETE /v1/apps/:id`

Deletes the application and revokes the paired API key. The deletion is soft: the application is hidden from the list, the catalog, and the Bitrix24 account handler; it cannot be restored via the API — create a new one if needed.

## Parameters

| Parameter | Type | Required | Description |
|----------|-----|:-----:|---------|
| `id` (path) | string | yes | Application identifier from [create](/docs/apps/create) or [list](/docs/apps/list) |

No request body is required — an empty body is allowed.

## Examples

### curl — personal key

```bash
curl -X DELETE https://vibecode.bitrix24.com/v1/apps/APP_ID \
  -H "X-Api-Key: YOUR_API_KEY"
```

### curl — OAuth application

```bash
curl -X DELETE https://vibecode.bitrix24.com/v1/apps/APP_ID \
  -H "X-Api-Key: YOUR_APP_KEY" \
  -H "Authorization: Bearer USER_SESSION_TOKEN"
```

### JavaScript — personal key

```javascript
const res = await fetch('https://vibecode.bitrix24.com/v1/apps/APP_ID', {
  method: 'DELETE',
  headers: { 'X-Api-Key': 'YOUR_API_KEY' },
})
if (res.status === 204) {
  console.log('Deleted')
}
```

### JavaScript — OAuth application

```javascript
const res = await fetch('https://vibecode.bitrix24.com/v1/apps/APP_ID', {
  method: 'DELETE',
  headers: {
    'X-Api-Key': 'YOUR_APP_KEY',
    'Authorization': 'Bearer USER_SESSION_TOKEN',
  },
})
```

## Response

On successful deletion an HTTP status `204 No Content` with an empty body is returned. The success indicator is the response code, not the content.

## Response example

```
204 No Content (no body)
```

## Error response example

409 — the paired key still owns active servers:

```json
{
  "success": false,
  "error": {
    "code": "APP_HAS_ACTIVE_SERVERS",
    "message": "App key has active servers — rebind them first",
    "details": {
      "activeServerCount": 2,
      "userMessage": "Rebind the servers to another key before deleting the application",
      "servers": [
        { "id": "srv-1", "name": "app-abc12345" }
      ]
    }
  }
}
```

## Errors

| HTTP | Code | Description |
|------|-----|---------|
| 403 | `UNAUTHORIZED` | The key does not belong to the author or owner of the application |
| 404 | `APP_NOT_FOUND` | No application with the specified `id`. Repeated deletion of the same `id` also returns this code |
| 409 | `APP_HAS_ACTIVE_SERVERS` | The paired key still owns active servers — rebind them to another key first. `details` carries `activeServerCount`, `userMessage`, `servers` |

Full list of common API errors — [Errors](/docs/errors).

## Known specifics

- **Repeated deletion is idempotent.** A second `DELETE` of the same `id` returns `404 APP_NOT_FOUND` — the application is already hidden by the soft deletion. This is a normal response, not a failure: the repeated call is safe.

## See also

- [Applications](/docs/apps)
- [Create an application](/docs/apps/create)
- [Application data](/docs/apps/get)
- [Update an application](/docs/apps/update)