diff --git a/server/api/apiKeys.js b/server/api/apiKeys.js
index 3de47baa..1dd33ba4 100644
--- a/server/api/apiKeys.js
+++ b/server/api/apiKeys.js
@@ -53,7 +53,7 @@ router.post('apiKeys.delete', auth(), async ctx => {
 
   const user = ctx.state.user;
   const key = await ApiKey.findById(id);
-  authorize(user, 'delete', ApiKey);
+  authorize(user, 'delete', key);
 
   try {
     await key.destroy();