# Delete Allowed Zone
## Endpoint
`/api/allowed/delete`
**Obsolete Path:** `/api/deleteAllowedZone`
## Method
GET
## Description
Deletes a zone from the Allowed Zones. This removes the specified domain from the allow list.
## Authentication
Required. A valid session token obtained from the `login` or `createToken` API call.
## Permissions
Allowed: Delete
## Parameters
| `token` | string | Yes | No | The session token generated by the `login` or the `createToken` call. |
| `domain` | string | Yes | No | The domain name for the zone to be deleted from the Allowed Zones. |
## Response Fields
| `status` | string | `"ok"` on success. |
## Conditional Logic Notes
- No conditional parameters. Both `token` and `domain` are always required.
- The API uses the "Delete" permission level, which is shared with the `flush` endpoint.
## Edge Cases
- The documentation does not specify behavior when deleting a domain that does not exist in the Allowed Zones (may return `"ok"` regardless, or may return an error).
- No `node` parameter is documented for this endpoint, so it may not support cluster-aware targeting.
- Deleting a zone removes only that specific domain entry; it does not cascade to child zones or related records.