# Delete application legacy secret **DELETE /api/applications/{id}/legacy-secret** Delete the legacy secret for the application and replace it with a new internal secret. Note: This operation does not "really" delete the legacy secret because it is still needed for internal validation. We may remove the display of the legacy secret (the `secret` field in the application response) in the future. ## Servers - Logto endpoint address.: https://[tenant_id].logto.app (Logto endpoint address.) ## Authentication methods - O auth2 ## Parameters #### Path parameters - **id** (string) The unique identifier of the application. ## Responses ### 200: OK #### Body Parameters: application/json (object) - **tenantId** (string) - **id** (string) - **name** (string) - **secret** (string) - **description** (string | null) - **type** (string) - **oidcClientMetadata** (object) - **customClientMetadata** (object) - **protectedAppMetadata** (object | null) - **customData** (object) arbitrary - **isThirdParty** (boolean) - **createdAt** (number) ### 204: The legacy secret was deleted successfully. ### 400: The application does not have a legacy secret. ### 401: Unauthorized ### 403: Forbidden ### 404: Not Found [Powered by Bump.sh](https://bump.sh)