You can delete permissions from an API using the or the .

​
Use the Dashboard

  1. Go to Dashboard > Applications > APIs and click the name of the API to view.
    Dashboard Applications APIs List
  2. Go to the Permissions tab and click the trashcan icon next to the permission you want to remove and confirm.
    Dashboard Add API Permissions API Define Permissions Screen

​
Use the Management API

Make a PATCH call to the Update Resource Server endpoint that includes all permissions you want to keep and excludes all permissions you want to delete. Replace API_ID, MGMT_API_ACCESS_TOKEN, PERMISSION_NAME, and PERMISSION_DESC placeholder values with your API ID, Management API , permission name(s), and permission description(s), respectively. 
curl --request PATCH \
  --url 'https://{yourDomain}/api/v2/resource-servers/API_ID' \
  --header 'authorization: Bearer MGMT_API_ACCESS_TOKEN' \
  --header 'cache-control: no-cache' \
  --header 'content-type: application/json' \
  --data '{ "scopes": [ { "value": "PERMISSION_NAME", "description": "PERMISSION_DESC" }, { "value": "PERMISSION_NAME", "description": "PERMISSION_DESC" } ] }'```
ValueDescription
API_IDID of the API for which you want to delete permissions.
MGMT_API_ACCESS_TOKENAccess Token for the Management API with the scope update:resource_servers.
PERMISSION_NAMEName(s) of the permission(s) you want to keep for the specified API.
PERMISSION_DESCUser-friendly description(s) of the permission(s) you want to keep for the specified API.

​
Learn more