# Delete an authorisation rule

Deletes an authorisation rule that is **currently not applied**.
If a rule is applied, you should [unapply](/api-reference/spend-controls/spendcontrolsruleunapply) the rule before deleting it.

Endpoint: DELETE /spend/applications/{clientId}/spend-controls/rules/{ruleId}
Security: ClientCredentialsToken

## Path parameters:

  - `clientId` (string, required)
    The application client ID.

  - `ruleId` (integer, required)
    The ID of the authorisation rule to delete.

## Header parameters:

  - `X-External-Correlation-Id` (string)
    Optional UUID for correlating requests across systems. If provided, Wise echoes it back in the response. Maximum 36 characters. [Learn more](/guides/developer/headers/correlation-id).