# Stop allowing a website

**DELETE** `/api/embed/v1/websites/{origin}`

Stops a website from showing the embed.

Needs a partner key: `Authorization: Bearer gre_…`, from [Platform › Partner keys](https://docs.gorunner.io/embed/platform-screens#partner-keys). Call it from your server only.

Embed · Self-hosted with an Embed license

## Parameters

### Path

- `origin` · Required · string: The website, URL-encoded: `https%3A%2F%2Fapp.bakery.example`.

## Responses

- 204 No Content

  Removed. The next load there is refused; a session already open goes on until it renews.

- 404 `NOT_FOUND`

  The list doesn’t have it.

- 500 `INTERNAL_ERROR`

  Something failed on the installation’s side. Try again.

Any call can also answer: [`401 UNAUTHORIZED`](https://docs.gorunner.io/errors#UNAUTHORIZED) · [`403 EMBED_NOT_LICENSED`](https://docs.gorunner.io/errors#EMBED_NOT_LICENSED) · [`403 IP_NOT_ALLOWED`](https://docs.gorunner.io/errors#IP_NOT_ALLOWED) · [`429 RATE_LIMITED`](https://docs.gorunner.io/errors#RATE_LIMITED) · [`503 BUSY`](https://docs.gorunner.io/errors#BUSY). See [Errors](https://docs.gorunner.io/embed/api#errors).

Request

**curl**

```bash
GORUNNER="https://automations.example.com"
GORUNNER_EMBED_KEY="YOUR_PARTNER_KEY"  # gre_…
ORIGIN="https%3A%2F%2Fapp.bakery.example"  # URL-encoded

curl -X DELETE "$GORUNNER/api/embed/v1/websites/$ORIGIN" \
  -H "Authorization: Bearer $GORUNNER_EMBED_KEY"
```

**JavaScript**

```js
const GORUNNER = "https://automations.example.com";
const KEY = process.env.GORUNNER_EMBED_KEY; // gre_…
const ORIGIN = encodeURIComponent("https://app.bakery.example");

const res = await fetch(
  `${GORUNNER}/api/embed/v1/websites/${ORIGIN}`,
  {
    method: "DELETE",
    headers: { Authorization: `Bearer ${KEY}` },
  },
);
console.log(res.status); // 204
```

**Python**

```python
import os, requests
from urllib.parse import quote

GORUNNER = "https://automations.example.com"
KEY = os.environ["GORUNNER_EMBED_KEY"]  # gre_…
ORIGIN = quote("https://app.bakery.example", safe="")

res = requests.delete(
    f"{GORUNNER}/api/embed/v1/websites/{ORIGIN}",
    headers={"Authorization": f"Bearer {KEY}"},
)
print(res.status_code)  # 204
```

Response · 204 No Content

```http
HTTP/1.1 204 No Content
```

**Every field**

It takes no body.

204 No Content: no body.

Related: [List allowed websites](https://docs.gorunner.io/embed/api/websites/list-websites)

Source: https://docs.gorunner.io/embed/api/websites/remove-website