diff --git a/src/frontend/src/lib/components/mission-control/setup/MissionControlAccessKeys.svelte b/src/frontend/src/lib/components/mission-control/setup/MissionControlAccessKeys.svelte
index ecbc2b5f68..ba61db891f 100644
--- a/src/frontend/src/lib/components/mission-control/setup/MissionControlAccessKeys.svelte
+++ b/src/frontend/src/lib/components/mission-control/setup/MissionControlAccessKeys.svelte
@@ -2,9 +2,9 @@
 	import { nonNullish } from '@dfinity/utils';
 	import type { Principal } from '@icp-sdk/core/principal';
 	import type { MissionControlDid } from '$declarations';
-	import { listMissionControlControllers } from '$lib/api/mission-control.api';
 	import AccessKeys from '$lib/components/modules/access-keys/AccessKeys.svelte';
 	import { authIdentity } from '$lib/derived/auth.derived';
+	import { listMissionControlControllers } from '$lib/services/access-keys/mission-control.key.list.services';
 	import {
 		addMissionControlAccessKey,
 		removeMissionControlAccessKey
@@ -13,7 +13,8 @@
 	import type {
 		AddAccessKeyResult,
 		AddAccessKeyParams,
-		AccessKeyIdParam
+		AccessKeyIdParam,
+		AccessKeyUi
 	} from '$lib/types/access-keys';
 	import type { MissionControlId } from '$lib/types/mission-control';
 
@@ -23,7 +24,7 @@
 
 	let { missionControlId }: Props = $props();
 
-	const list = (): Promise<[Principal, MissionControlDid.AccessKey][]> =>
+	const list = (): Promise<[Principal, AccessKeyUi][]> =>
 		listMissionControlControllers({ missionControlId, identity: $authIdentity });
 
 	const remove = async (accessKey: AccessKeyIdParam): Promise<AddAccessKeyResult> =>
diff --git a/src/frontend/src/lib/components/modals/setup/AccessKeyCreateModal.svelte b/src/frontend/src/lib/components/modals/setup/AccessKeyCreateModal.svelte
index d164b6e39c..ee6404f299 100644
--- a/src/frontend/src/lib/components/modals/setup/AccessKeyCreateModal.svelte
+++ b/src/frontend/src/lib/components/modals/setup/AccessKeyCreateModal.svelte
@@ -26,7 +26,8 @@
 	let step: 'init' | 'in_progress' | 'ready' | 'error' = $state('init');
 
 	let accessKeyId = $state('');
-	let scope = $state<AddAccessKeyScope>('write');
+	// svelte-ignore state_referenced_locally
+	let scope = $state<AddAccessKeyScope>(segment.segment === 'ufo' ? 'admin' : 'write');
 	let identity: string | undefined = $state();
 
 	const initAccessKey = (): string | undefined => {
@@ -180,7 +181,7 @@
 					{#snippet label()}
 						{$i18n.controllers.scope}
 					{/snippet}
-					<select name="scope" bind:value={scope}>
+					<select name="scope" disabled={segment.segment === 'ufo'} bind:value={scope}>
 						<option value="submit">{$i18n.controllers.submit}</option>
 						<option value="write">{$i18n.controllers.write}</option>
 						<option value="admin">{$i18n.controllers.admin}</option>
diff --git a/src/frontend/src/lib/components/modules/access-keys/AccessKeyDelete.svelte b/src/frontend/src/lib/components/modules/access-keys/AccessKeyDelete.svelte
index dc92122573..2e414e085b 100644
--- a/src/frontend/src/lib/components/modules/access-keys/AccessKeyDelete.svelte
+++ b/src/frontend/src/lib/components/modules/access-keys/AccessKeyDelete.svelte
@@ -1,17 +1,16 @@
 <script lang="ts">
 	import { isNullish } from '@dfinity/utils';
 	import type { Principal } from '@icp-sdk/core/principal';
-	import type { SatelliteDid } from '$declarations';
 	import Confirmation from '$lib/components/app/core/Confirmation.svelte';
 	import Value from '$lib/components/ui/Value.svelte';
 	import { busy } from '$lib/stores/app/busy.store';
 	import { i18n } from '$lib/stores/app/i18n.store';
 	import { toasts } from '$lib/stores/app/toasts.store';
-	import type { AccessKeyIdParam, AddAccessKeyResult } from '$lib/types/access-keys';
+	import type { AccessKeyIdParam, AccessKeyUi, AddAccessKeyResult } from '$lib/types/access-keys';
 
 	interface Props {
 		visible?: boolean;
-		selectedController: [Principal, SatelliteDid.AccessKey | undefined] | undefined;
+		selectedController: [Principal, AccessKeyUi | undefined] | undefined;
 		remove: (params: AccessKeyIdParam) => Promise<AddAccessKeyResult>;
 		load: () => Promise<void>;
 	}
diff --git a/src/frontend/src/lib/components/modules/access-keys/AccessKeys.svelte b/src/frontend/src/lib/components/modules/access-keys/AccessKeys.svelte
index d43103f989..0152087592 100644
--- a/src/frontend/src/lib/components/modules/access-keys/AccessKeys.svelte
+++ b/src/frontend/src/lib/components/modules/access-keys/AccessKeys.svelte
@@ -2,7 +2,6 @@
 	import { nonNullish } from '@dfinity/utils';
 	import type { Principal } from '@icp-sdk/core/principal';
 	import { onMount } from 'svelte';
-	import type { MissionControlDid } from '$declarations';
 	import AccessKeyAdd from '$lib/components/modules/access-keys/AccessKeyAdd.svelte';
 	import AccessKeyDelete from '$lib/components/modules/access-keys/AccessKeyDelete.svelte';
 	import AccessKeyInfo from '$lib/components/modules/access-keys/AccessKeyInfo.svelte';
@@ -15,23 +14,24 @@
 	import type {
 		AddAccessKeyResult,
 		AddAccessKeyParams,
-		AccessKeyIdParam
+		AccessKeyIdParam,
+		AccessKeyUi
 	} from '$lib/types/access-keys';
 	import type { CanisterSegmentWithLabel } from '$lib/types/canister';
 	import { metadataProfile } from '$lib/utils/metadata.utils';
 
 	interface Props {
-		list: () => Promise<[Principal, MissionControlDid.AccessKey][]>;
+		list: () => Promise<[Principal, AccessKeyUi][]>;
 		remove: (params: AccessKeyIdParam) => Promise<AddAccessKeyResult>;
 		add: (params: AddAccessKeyParams) => Promise<AddAccessKeyResult>;
 		segment: CanisterSegmentWithLabel;
 		// The canister and user are controllers of the mission control but not added in its state per default
-		extraControllers?: [Principal, MissionControlDid.AccessKey][];
+		extraControllers?: [Principal, AccessKeyUi][];
 	}
 
 	let { list, remove, add, segment, extraControllers = [] }: Props = $props();
 
-	let controllers = $state<[Principal, MissionControlDid.AccessKey][]>([]);
+	let controllers = $state<[Principal, AccessKeyUi][]>([]);
 
 	const load = async () => {
 		try {
@@ -52,9 +52,7 @@
 
 	let visibleDelete = $state(false);
 	let visibleInfo = $state(false);
-	let selectedController = $state<[Principal, MissionControlDid.AccessKey | undefined] | undefined>(
-		undefined
-	);
+	let selectedController = $state<[Principal, AccessKeyUi | undefined] | undefined>(undefined);
 
 	const isMissionControl = (controllerId: Principal): boolean =>
 		nonNullish($missionControlId) && $missionControlId.toText() === controllerId.toText();
diff --git a/src/frontend/src/lib/components/orbiter/setup/OrbiterAccessKeys.svelte b/src/frontend/src/lib/components/orbiter/setup/OrbiterAccessKeys.svelte
index f004348d1c..9d1774eb65 100644
--- a/src/frontend/src/lib/components/orbiter/setup/OrbiterAccessKeys.svelte
+++ b/src/frontend/src/lib/components/orbiter/setup/OrbiterAccessKeys.svelte
@@ -1,13 +1,12 @@
 <script lang="ts">
 	import type { Principal } from '@icp-sdk/core/principal';
-	import type { MissionControlDid } from '$declarations';
 	import { deleteOrbitersController, setOrbitersController } from '$lib/api/mission-control.api';
-	import { listOrbiterControllers } from '$lib/api/orbiter.api';
 	import AccessKeys from '$lib/components/modules/access-keys/AccessKeys.svelte';
 	import { authIdentity } from '$lib/derived/auth.derived';
 	import { missionControlId } from '$lib/derived/console/account.mission-control.derived';
 	import { addAccessKey, removeAccessKey } from '$lib/services/access-keys/access-keys.services';
 	import { addOrbiterAccessKey } from '$lib/services/access-keys/orbiter.key.add.services';
+	import { listOrbiterControllers } from '$lib/services/access-keys/orbiter.key.list.services';
 	import { removeOrbiterAccessKey } from '$lib/services/access-keys/orbiter.key.remove.services';
 	import { i18n } from '$lib/stores/app/i18n.store';
 	import type {
@@ -15,7 +14,8 @@
 		AddAccessKeyParams,
 		AccessKeyWithDevFn,
 		AccessKeyWithMissionControlFn,
-		AccessKeyIdParam
+		AccessKeyIdParam,
+		AccessKeyUi
 	} from '$lib/types/access-keys';
 
 	interface Props {
@@ -24,7 +24,7 @@
 
 	let { orbiterId }: Props = $props();
 
-	const list = (): Promise<[Principal, MissionControlDid.AccessKey][]> =>
+	const list = (): Promise<[Principal, AccessKeyUi][]> =>
 		listOrbiterControllers({ orbiterId, identity: $authIdentity });
 
 	const remove = async (accessKey: AccessKeyIdParam): Promise<AddAccessKeyResult> => {
diff --git a/src/frontend/src/lib/components/satellites/setup/SatelliteAccessKeys.svelte b/src/frontend/src/lib/components/satellites/setup/SatelliteAccessKeys.svelte
index 66b1b5e4db..90c078168a 100644
--- a/src/frontend/src/lib/components/satellites/setup/SatelliteAccessKeys.svelte
+++ b/src/frontend/src/lib/components/satellites/setup/SatelliteAccessKeys.svelte
@@ -1,16 +1,15 @@
 <script lang="ts">
 	import type { Principal } from '@icp-sdk/core/principal';
-	import type { MissionControlDid } from '$declarations';
 	import {
 		deleteSatellitesController,
 		setSatellitesController
 	} from '$lib/api/mission-control.api';
-	import { listControllers } from '$lib/api/satellites.api';
 	import AccessKeys from '$lib/components/modules/access-keys/AccessKeys.svelte';
 	import { authIdentity } from '$lib/derived/auth.derived';
 	import { missionControlId } from '$lib/derived/console/account.mission-control.derived';
 	import { addAccessKey, removeAccessKey } from '$lib/services/access-keys/access-keys.services';
 	import { addSatellitesAccessKey } from '$lib/services/access-keys/satellites.key.add.services';
+	import { listSatelliteControllers } from '$lib/services/access-keys/satellites.key.list.services';
 	import { removeSatellitesAccessKey } from '$lib/services/access-keys/satellites.key.remove.services';
 	import { i18n } from '$lib/stores/app/i18n.store';
 	import type {
@@ -18,7 +17,8 @@
 		AddAccessKeyParams,
 		AccessKeyWithDevFn,
 		AccessKeyWithMissionControlFn,
-		AccessKeyIdParam
+		AccessKeyIdParam,
+		AccessKeyUi
 	} from '$lib/types/access-keys';
 	import type { Satellite } from '$lib/types/satellite';
 
@@ -28,8 +28,8 @@
 
 	let { satellite }: Props = $props();
 
-	const list = (): Promise<[Principal, MissionControlDid.AccessKey][]> =>
-		listControllers({ satelliteId: satellite.satellite_id, identity: $authIdentity });
+	const list = (): Promise<[Principal, AccessKeyUi][]> =>
+		listSatelliteControllers({ satelliteId: satellite.satellite_id, identity: $authIdentity });
 
 	const remove = async (accessKey: AccessKeyIdParam): Promise<AddAccessKeyResult> => {
 		const satelliteIds = [satellite.satellite_id];
diff --git a/src/frontend/src/lib/components/ufos/setup/UfoAccessKeys.svelte b/src/frontend/src/lib/components/ufos/setup/UfoAccessKeys.svelte
new file mode 100644
index 0000000000..b042e9a709
--- /dev/null
+++ b/src/frontend/src/lib/components/ufos/setup/UfoAccessKeys.svelte
@@ -0,0 +1,52 @@
+<script lang="ts">
+	import type { Principal } from '@icp-sdk/core/principal';
+	import AccessKeys from '$lib/components/modules/access-keys/AccessKeys.svelte';
+	import { authIdentity } from '$lib/derived/auth.derived';
+	import {
+		addUfoController,
+		listUfoControllers,
+		removeUfoController
+	} from '$lib/services/access-keys/ufo.key.services';
+	import { i18n } from '$lib/stores/app/i18n.store';
+	import type {
+		AddAccessKeyResult,
+		AddAccessKeyParams,
+		AccessKeyIdParam,
+		AccessKeyUi
+	} from '$lib/types/access-keys';
+	import type { Ufo } from '$lib/types/ufo';
+
+	interface Props {
+		ufo: Ufo;
+	}
+
+	let { ufo }: Props = $props();
+
+	const list = (): Promise<[Principal, AccessKeyUi][]> =>
+		listUfoControllers({ ufoId: ufo.ufo_id, identity: $authIdentity });
+
+	const remove = async (accessKey: AccessKeyIdParam): Promise<AddAccessKeyResult> =>
+		await removeUfoController({
+			identity: $authIdentity,
+			ufoId: ufo.ufo_id,
+			accessKey
+		});
+
+	const add = async (accessKey: AddAccessKeyParams): Promise<AddAccessKeyResult> =>
+		await addUfoController({
+			identity: $authIdentity,
+			accessKey,
+			ufoId: ufo.ufo_id
+		});
+</script>
+
+<AccessKeys
+	{add}
+	{list}
+	{remove}
+	segment={{
+		label: $i18n.ufo.title,
+		canisterId: ufo.ufo_id.toText(),
+		segment: 'ufo'
+	}}
+/>
diff --git a/src/frontend/src/lib/components/ufos/setup/UfoSettings.svelte b/src/frontend/src/lib/components/ufos/setup/UfoSettings.svelte
index 89fa8dd9d1..9eae5a6235 100644
--- a/src/frontend/src/lib/components/ufos/setup/UfoSettings.svelte
+++ b/src/frontend/src/lib/components/ufos/setup/UfoSettings.svelte
@@ -1,9 +1,8 @@
 <script lang="ts">
 	import CanisterSettings from '$lib/components/modules/canister/settings/CanisterSettings.svelte';
 	import Snapshots from '$lib/components/modules/snapshot/Snapshots.svelte';
-	import SatelliteAccessKeys from '$lib/components/satellites/setup/SatelliteAccessKeys.svelte';
+	import UfoAccessKeys from '$lib/components/ufos/setup/UfoAccessKeys.svelte';
 	import { i18n } from '$lib/stores/app/i18n.store';
-	import type { Satellite } from '$lib/types/satellite';
 	import type { Ufo } from '$lib/types/ufo';
 
 	interface Props {
@@ -15,4 +14,6 @@
 
 <CanisterSettings canisterId={ufo.ufo_id} segment="ufo" segmentLabel={$i18n.ufo.title} />
 
+<UfoAccessKeys {ufo} />
+
 <Snapshots canisterId={ufo.ufo_id} segment="ufo" segmentLabel={$i18n.ufo.title} />
diff --git a/src/frontend/src/lib/i18n/en.json b/src/frontend/src/lib/i18n/en.json
index fd93a7752b..e2ddf21eb6 100644
--- a/src/frontend/src/lib/i18n/en.json
+++ b/src/frontend/src/lib/i18n/en.json
@@ -660,6 +660,7 @@
 		"controllers_no_selection": "No access key to delete selected.",
 		"controllers_add": "Unexpected error(s) while adding the access key.",
 		"controllers_delete": "Unexpected error(s) while deleting the access key.",
+		"ufo_controller_not_admin": "Only access keys with admin privileges can be added to a UFO.",
 		"data_delete": "Unexpected error(s) while deleting.",
 		"key_invalid": "Key is invalid or empty.",
 		"full_path_invalid": "Key (full_path) is invalid or empty.",
diff --git a/src/frontend/src/lib/i18n/zh-cn.json b/src/frontend/src/lib/i18n/zh-cn.json
index 0cfa3f412a..f368f225f3 100644
--- a/src/frontend/src/lib/i18n/zh-cn.json
+++ b/src/frontend/src/lib/i18n/zh-cn.json
@@ -662,6 +662,7 @@
 		"controllers_no_selection": "未选择要删除的密钥。",
 		"controllers_add": "添加访问密钥时发生意外错误。",
 		"controllers_delete": "删除密钥时发生意外错误。",
+		"ufo_controller_not_admin": "只有具有管理员权限的访问密钥才能添加到 UFO。",
 		"data_delete": "删除时发生意外错误。",
 		"key_invalid": "密钥无效或为空。",
 		"full_path_invalid": "密钥（full_path）无效或为空。",
diff --git a/src/frontend/src/lib/services/access-keys/_key.list.services.ts b/src/frontend/src/lib/services/access-keys/_key.list.services.ts
new file mode 100644
index 0000000000..4dff3f95c2
--- /dev/null
+++ b/src/frontend/src/lib/services/access-keys/_key.list.services.ts
@@ -0,0 +1,18 @@
+import type { MissionControlDid } from '$declarations';
+import type { AccessKeyUi } from '$lib/types/access-keys';
+import type { MissionControlId } from '$lib/types/mission-control';
+import { fromNullable } from '@dfinity/utils';
+import type { Principal } from '@icp-sdk/core/principal';
+
+export const mapAccessKeysUi = (
+	keys: [Principal, MissionControlDid.AccessKey][]
+): [MissionControlId, AccessKeyUi][] =>
+	keys.map(([id, { expires_at, updated_at, created_at, ...rest }]) => [
+		id,
+		{
+			...rest,
+			expiresAt: fromNullable(expires_at),
+			createdAt: created_at,
+			updatedAt: updated_at
+		}
+	]);
diff --git a/src/frontend/src/lib/services/access-keys/mission-control.key.list.services.ts b/src/frontend/src/lib/services/access-keys/mission-control.key.list.services.ts
new file mode 100644
index 0000000000..9c053b75cf
--- /dev/null
+++ b/src/frontend/src/lib/services/access-keys/mission-control.key.list.services.ts
@@ -0,0 +1,13 @@
+import { listMissionControlControllers as listMissionControlControllersApi } from '$lib/api/mission-control.api';
+import { mapAccessKeysUi } from '$lib/services/access-keys/_key.list.services';
+import type { AccessKeyUi } from '$lib/types/access-keys';
+import type { NullishIdentity } from '$lib/types/itentity';
+import type { MissionControlId } from '$lib/types/mission-control';
+
+export const listMissionControlControllers = async (params: {
+	missionControlId: MissionControlId;
+	identity: NullishIdentity;
+}): Promise<[MissionControlId, AccessKeyUi][]> => {
+	const accessKeys = await listMissionControlControllersApi(params);
+	return mapAccessKeysUi(accessKeys);
+};
diff --git a/src/frontend/src/lib/services/access-keys/orbiter.key.list.services.ts b/src/frontend/src/lib/services/access-keys/orbiter.key.list.services.ts
new file mode 100644
index 0000000000..38330af7e0
--- /dev/null
+++ b/src/frontend/src/lib/services/access-keys/orbiter.key.list.services.ts
@@ -0,0 +1,13 @@
+import { listOrbiterControllers as listOrbiterControllersApi } from '$lib/api/orbiter.api';
+import { mapAccessKeysUi } from '$lib/services/access-keys/_key.list.services';
+import type { AccessKeyUi } from '$lib/types/access-keys';
+import type { NullishIdentity } from '$lib/types/itentity';
+import type { OrbiterId } from '$lib/types/orbiter';
+
+export const listOrbiterControllers = async (params: {
+	orbiterId: OrbiterId;
+	identity: NullishIdentity;
+}): Promise<[OrbiterId, AccessKeyUi][]> => {
+	const accessKeys = await listOrbiterControllersApi(params);
+	return mapAccessKeysUi(accessKeys);
+};
diff --git a/src/frontend/src/lib/services/access-keys/satellites.key.list.services.ts b/src/frontend/src/lib/services/access-keys/satellites.key.list.services.ts
new file mode 100644
index 0000000000..9a6b6dacad
--- /dev/null
+++ b/src/frontend/src/lib/services/access-keys/satellites.key.list.services.ts
@@ -0,0 +1,13 @@
+import { listControllers } from '$lib/api/satellites.api';
+import { mapAccessKeysUi } from '$lib/services/access-keys/_key.list.services';
+import type { AccessKeyUi } from '$lib/types/access-keys';
+import type { NullishIdentity } from '$lib/types/itentity';
+import type { SatelliteId } from '$lib/types/satellite';
+
+export const listSatelliteControllers = async (params: {
+	satelliteId: SatelliteId;
+	identity: NullishIdentity;
+}): Promise<[SatelliteId, AccessKeyUi][]> => {
+	const accessKeys = await listControllers(params);
+	return mapAccessKeysUi(accessKeys);
+};
diff --git a/src/frontend/src/lib/services/access-keys/ufo.key.services.ts b/src/frontend/src/lib/services/access-keys/ufo.key.services.ts
new file mode 100644
index 0000000000..7c103cde52
--- /dev/null
+++ b/src/frontend/src/lib/services/access-keys/ufo.key.services.ts
@@ -0,0 +1,162 @@
+import type { ICDid } from '$declarations';
+import { canisterStatus, canisterUpdateSettings } from '$lib/api/ic.api';
+import { setAdminController } from '$lib/services/access-keys/key.admin.services';
+import { i18n } from '$lib/stores/app/i18n.store';
+import { toasts } from '$lib/stores/app/toasts.store';
+import type {
+	AccessKeyIdParam,
+	AccessKeyUi,
+	AddAccessKeyParams,
+	AddAccessKeyResult
+} from '$lib/types/access-keys';
+import type { NullishIdentity } from '$lib/types/itentity';
+import type { UfoId } from '$lib/types/ufo';
+import { assertNonNullish, isNullish, toNullable } from '@dfinity/utils';
+import type { Identity } from '@icp-sdk/core/agent';
+import { Principal } from '@icp-sdk/core/principal';
+import { get } from 'svelte/store';
+
+export const listUfoControllers = async ({
+	ufoId,
+	identity
+}: {
+	ufoId: UfoId;
+	identity: NullishIdentity;
+}): Promise<[Principal, AccessKeyUi][]> => {
+	assertNonNullish(identity);
+
+	const {
+		settings: { controllers }
+	} = await canisterStatus({
+		canisterId: ufoId.toText(),
+		identity
+	});
+
+	return controllers.map((controllerId) => [
+		controllerId,
+		{
+			kind: toNullable(),
+			metadata: toNullable(),
+			scope: { Admin: null }
+		}
+	]);
+};
+
+export const addUfoController = async ({
+	identity,
+	accessKey: { scope, ...accessKeyRest },
+	ufoId
+}: {
+	identity: NullishIdentity;
+	accessKey: AddAccessKeyParams;
+	ufoId: UfoId;
+}): Promise<AddAccessKeyResult> => {
+	// TODO: indentity check service
+	if (isNullish(identity) || isNullish(identity?.getPrincipal())) {
+		toasts.error({ text: get(i18n).core.not_logged_in });
+		return { result: 'error' };
+	}
+
+	if (scope !== 'admin') {
+		toasts.error({ text: get(i18n).errors.ufo_controller_not_admin });
+		return { result: 'error' };
+	}
+
+	try {
+		await setAdminController({
+			...accessKeyRest,
+			canisterId: ufoId,
+			identity
+		});
+
+		return { result: 'ok' };
+	} catch (err: unknown) {
+		toasts.error({
+			text: get(i18n).errors.controllers_add,
+			detail: err
+		});
+
+		return { result: 'error', err };
+	}
+};
+
+export const removeUfoController = async ({
+	identity,
+	accessKey: { accessKeyId },
+	ufoId
+}: {
+	identity: NullishIdentity;
+	accessKey: AccessKeyIdParam;
+	ufoId: UfoId;
+}): Promise<AddAccessKeyResult> => {
+	// TODO: indentity check service
+	if (isNullish(identity) || isNullish(identity?.getPrincipal())) {
+		toasts.error({ text: get(i18n).core.not_logged_in });
+		return { result: 'error' };
+	}
+
+	try {
+		const controllerId = Principal.isPrincipal(accessKeyId)
+			? accessKeyId
+			: Principal.fromText(accessKeyId);
+
+		await removeController({
+			controllerId,
+			canisterId: ufoId,
+			identity
+		});
+
+		return { result: 'ok' };
+	} catch (err: unknown) {
+		toasts.error({
+			text: get(i18n).errors.controllers_delete,
+			detail: err
+		});
+
+		return { result: 'error', err };
+	}
+};
+
+const removeController = async ({
+	controllerId,
+	canisterId,
+	identity
+}: {
+	controllerId: Principal;
+	canisterId: Principal;
+	identity: Identity;
+}): Promise<{ result: 'ok' | 'skip' } | { result: 'reject'; reason: string }> => {
+	const {
+		settings: { controllers: currentControllers }
+	} = await canisterStatus({
+		identity,
+		canisterId: canisterId.toText(),
+		// We need to be sure the list of controllers we get is correct here
+		// as we are using those to update the settings.
+		certified: true
+	});
+
+	const remainingControllers = currentControllers.filter(
+		(cId) => cId.toText() !== controllerId.toText()
+	);
+
+	const updateSettings: ICDid.canister_settings = {
+		environment_variables: toNullable(),
+		compute_allocation: toNullable(),
+		freezing_threshold: toNullable(),
+		log_visibility: toNullable(),
+		memory_allocation: toNullable(),
+		reserved_cycles_limit: toNullable(),
+		wasm_memory_limit: toNullable(),
+		wasm_memory_threshold: toNullable(),
+		controllers: toNullable(remainingControllers)
+	};
+
+	await canisterUpdateSettings({
+		canisterId,
+		identity,
+		settings: updateSettings
+	});
+
+	return { result: 'ok' };
+};
diff --git a/src/frontend/src/lib/types/access-keys.ts b/src/frontend/src/lib/types/access-keys.ts
index b0a06ce69f..428ad1e3a9 100644
--- a/src/frontend/src/lib/types/access-keys.ts
+++ b/src/frontend/src/lib/types/access-keys.ts
@@ -1,3 +1,4 @@
+import type { MissionControlDid } from '$declarations';
 import type { MissionControlId } from '$lib/types/mission-control';
 import type { Identity } from '@icp-sdk/core/agent';
 import type { Principal } from '@icp-sdk/core/principal';
@@ -26,3 +27,12 @@ export type AccessKeyWithMissionControlFn = (params: {
 }) => Promise<void>;
 
 export type AccessKeyWithDevFn = (params: { identity: Identity }) => Promise<void>;
+
+export type AccessKeyUi = Omit<
+	MissionControlDid.AccessKey,
+	'created_at' | 'updated_at' | 'expires_at'
+> & {
+	createdAt?: bigint;
+	updatedAt?: bigint;
+	expiresAt?: bigint;
+};
diff --git a/src/frontend/src/lib/types/i18n.d.ts b/src/frontend/src/lib/types/i18n.d.ts
index 141146f5cc..5b46b04554 100644
--- a/src/frontend/src/lib/types/i18n.d.ts
+++ b/src/frontend/src/lib/types/i18n.d.ts
@@ -678,6 +678,7 @@ interface I18nErrors {
 	controllers_no_selection: string;
 	controllers_add: string;
 	controllers_delete: string;
+	ufo_controller_not_admin: string;
 	data_delete: string;
 	key_invalid: string;
 	full_path_invalid: string;