> ## Documentation Index
> Fetch the complete documentation index at: https://simplecloud.app/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Delete the network shared public key

> Delete the network's shared public key, so the next serverhost to start registers its key again. Refused with 409 while the network stores secrets, because they are encrypted with this key; delete them first. Serverhosts keep their copy of the private key and re-register it on their next start, so this does not rotate the key unless the private key is also removed from every serverhost.



## OpenAPI

````yaml https://controller.simplecloud.app/swagger/doc.json delete /v0/secrets/encryption-key
openapi: 3.1.0
info:
  contact:
    name: SimpleCloud support
    url: https://discord.simplecloud.app
  description: >-
    Manage Minecraft networks, server groups, persistent servers, players, and
    plugins. Authenticate with Authorization: Bearer <JWT> or
    X-Network-Credential: <network password or JWT>. Bearer authentication takes
    precedence when both headers are supplied. Network-scoped operations also
    require X-Network-ID. JWT permissions and network membership restrict
    access; network passwords grant full access to their network, except that
    they cannot read the audit log. Registration requires an existing
    credential; password authentication also requires its existing network ID.
    The admin endpoint requires an admin JWT. Credential verification accepts
    credentials in the request body without authentication headers.
  title: SimpleCloud Controller API
  version: '1.0'
servers:
  - url: https://controller.simplecloud.app/
security: []
externalDocs:
  description: ''
  url: ''
paths:
  /v0/secrets/encryption-key:
    delete:
      tags:
        - secrets
      summary: Delete the network shared public key
      description: >-
        Delete the network's shared public key, so the next serverhost to start
        registers its key again. Refused with 409 while the network stores
        secrets, because they are encrypted with this key; delete them first.
        Serverhosts keep their copy of the private key and re-register it on
        their next start, so this does not rotate the key unless the private key
        is also removed from every serverhost.
      operationId: delete_encryption_key
      parameters:
        - description: Network ID
          in: header
          name: X-Network-ID
          required: true
          schema:
            type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/models.DeleteEncryptionKeyResponse'
          description: OK
        '401':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/models.ErrorResponse'
          description: Unauthorized
        '404':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/models.ErrorResponse'
          description: Not Found
        '409':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/models.ErrorResponse'
          description: Conflict
        '500':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/models.ErrorResponse'
          description: Internal Server Error
      security:
        - BearerAuth: []
        - NetworkCredential: []
components:
  schemas:
    models.DeleteEncryptionKeyResponse:
      description: Response for deleting the network shared public key
      properties:
        key_fingerprint:
          example: 3f5a...
          type: string
        message:
          example: Encryption key deleted successfully
          type: string
      type: object
    models.ErrorResponse:
      description: Generic error response
      properties:
        error:
          type: string
      type: object
  securitySchemes:
    BearerAuth:
      description: >-
        JWT sent in Authorization: Bearer <token>. Access depends on the token's
        network membership and permissions. The admin endpoint requires admin
        claims.
      scheme: bearer
      type: http
    NetworkCredential:
      description: >-
        Network password or signed JWT. Password authentication also requires
        X-Network-ID and grants full access to that network, except the audit
        log. JWT permissions still apply.
      in: header
      name: X-Network-Credential
      type: apiKey

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.