> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ornn.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Unassign an SSH key from a reservation

> Removes an assignment you created and queues the reservation's remaining key set for its active machines. An API key acts as its creator, so it can remove only assignments made by that person. If no assigned keys remain, the reservation returns to its default and every active organization key is queued. To stop a key from working everywhere, revoke it instead. Existing SSH sessions stay connected.

Unassigning a key does not revoke it. To block a key on every reservation, [revoke it](/api-reference/ssh-keys/revoke).


## OpenAPI

````yaml openapi.yaml DELETE /v1/orchestrator/nodes/reservations/{reservation_id}/ssh-keys/{key_id}
openapi: 3.1.0
info:
  title: Ornn compute API
  version: 1.0.0
  description: >-
    Customer HTTP API for Ornn GPU capacity. It covers reserved capacity and
    nodes, VM and Bare Metal access, Kubernetes and Slurm clusters, SSH keys,
    storage volumes and GitHub repositories, private networks, monitoring,
    buying and selling capacity (Reserve, Market, Spot, and Relist), and
    billing. API keys are scoped to one organization and act with their
    creator's access there; account, team, and API-key management stay in the
    console. Most operations require an approved organization. See
    https://docs.ornn.com/api-keys to create a key and
    https://docs.ornn.com/guides/kubernetes-api for an end-to-end Kubernetes
    integration. Examples use fictional IDs and credentials. The info.version
    field identifies the contract revision, not a shared API path version.
  contact:
    email: support@ornn.com
servers:
  - url: https://api.ornn.com
    description: Production
security:
  - OrnnApiKey: []
tags:
  - name: Authentication
  - name: Reservations
  - name: GPU nodes
  - name: Clusters
  - name: Workers
  - name: Virtual machines
    description: >-
      Choose a VM disk, launch VM access on a reservation, and read each VM's
      status, launch progress, and SSH connection details.
  - name: Bare Metal
    description: >-
      Launch Bare Metal access on a reservation, read a host's readiness and SSH
      connection details, and reboot or hard reset it.
  - name: SSH keys
    description: >-
      Register public keys for your organization, choose which keys a VM or Bare
      Metal reservation uses, and queue key delivery to machines. Slurm clusters
      take organization key IDs at launch. Kubernetes API access does not use
      SSH keys.
  - name: Reserve
    description: >-
      Browse reserved-capacity listings and their terms, and post, cancel, or
      accept offers. Reserve listings are visible to approved organizations.
  - name: Market
    description: >-
      Browse relisted capacity and buy windows at the asking price, paid up
      front. Open to every member of your organization.
  - name: Spot
    description: >-
      Hourly order books for VMs with 1, 2, 4, or 8 GPUs on one node: read
      books, trades, and quotes, place and cancel bids, and follow fills.
  - name: Relist
    description: >-
      Sell whole nodes from a reservation you hold at your asking price, and
      manage those listings.
  - name: Storage
    description: >-
      Managed volumes, their files, and GitHub repository pulls. Volumes belong
      to the API key's creator in the key's organization.
  - name: Networks
    description: >-
      Organization private networks and the WireGuard configs you use to reach
      private machines and clusters.
  - name: Monitoring
    description: >-
      Machine telemetry and console logs for capacity your organization holds.
      Reads are limited to your reservation window.
  - name: Billing
    description: >-
      Invoices, billing summary, usage cost, Ornn credits, and account
      statements. Saving a card and paying invoices stay in the console.
externalDocs:
  description: REST integration walkthrough
  url: >-
    https://docs.ornn.com/guides/kubernetes-access#provision-and-manage-through-rest
paths:
  /v1/orchestrator/nodes/reservations/{reservation_id}/ssh-keys/{key_id}:
    delete:
      tags:
        - SSH keys
      summary: Unassign an SSH key from a reservation
      description: >-
        Removes an assignment you created and queues the reservation's remaining
        key set for its active machines. An API key acts as its creator, so it
        can remove only assignments made by that person. If no assigned keys
        remain, the reservation returns to its default and every active
        organization key is queued. To stop a key from working everywhere,
        revoke it instead. Existing SSH sessions stay connected.
      operationId: accountUnassignReservationSshKey
      parameters:
        - $ref: '#/components/parameters/AccountReservationId'
        - name: key_id
          in: path
          required: true
          description: Organization SSH key ID assigned to the reservation.
          schema:
            type: string
            format: uuid
          example: 77777777-7777-4777-8777-777777777777
      responses:
        '204':
          description: The assignment is removed and the remaining key set is queued.
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          description: >-
            The reservation is not visible to your organization, or you have no
            assignment for this key on it.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
              example:
                detail:
                  code: reservation_ssh_key_not_found
                  message: >-
                    That SSH key is not registered on this reservation. It may
                    already be removed.
        '409':
          $ref: '#/components/responses/AccountReservationNotLaunchable'
        '429':
          $ref: '#/components/responses/AccountRateLimited'
        default:
          $ref: '#/components/responses/Error'
components:
  parameters:
    AccountReservationId:
      name: reservation_id
      in: path
      required: true
      description: >-
        A reservation your organization holds. Keys are delivered to its VM and
        Bare Metal machines.
      schema:
        type: string
        format: uuid
      example: 11111111-1111-4111-8111-111111111111
  responses:
    Unauthorized:
      description: >-
        The credential is missing, invalid, revoked, or no longer belongs to a
        current organization member. Check the HTTP status before parsing the
        body.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
    Forbidden:
      description: >-
        The credential lacks access to this operation, or the organization
        requires approval. An API key does not bypass these checks.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
    AccountReservationNotLaunchable:
      description: >-
        The reservation has ended, was cancelled, or has a pending change, so
        its keys cannot change.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
          example:
            detail:
              code: reservation_not_launchable
              message: This reservation cannot launch in its current state.
    AccountRateLimited:
      description: >-
        Too many requests. Wait for the number of seconds in Retry-After, or at
        least 60 seconds when the header is absent, then retry with jitter.
      headers:
        Retry-After:
          description: Seconds to wait before retrying.
          schema:
            type: integer
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/AccountRateLimitError'
          example:
            error: rate_limited
            retry_after: 42
            detail: Too many requests. Try again in 42 seconds.
    Error:
      description: >-
        Unsuccessful request. Check HTTP status first. Errors may have
        detail.code/detail.message, a string detail and optional top-level code,
        or an empty/non-JSON body. 401: invalid credential; 403: access or
        approval required; 404: not visible or credentials not ready; 409:
        lifecycle conflict; 429: back off; 5xx: service failure. Inspect current
        state before retrying mutations.
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/Error'
  schemas:
    Error:
      type: object
      properties:
        code:
          type: string
        detail:
          oneOf:
            - type: string
            - type: object
              required:
                - code
                - message
              properties:
                code:
                  type: string
                message:
                  type: string
    AccountRateLimitError:
      type: object
      properties:
        error:
          type: string
          enum:
            - rate_limited
        retry_after:
          type: integer
          description: Seconds to wait before retrying.
        detail:
          type: string
  securitySchemes:
    OrnnApiKey:
      type: http
      scheme: bearer
      bearerFormat: ornn_sk_...
      description: >-
        Create an organization API key in Account Settings > Developer. Do not
        send this key to the Kubernetes API server.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.