Skip to main content
DELETE
Revoke a credential

Authorizations

Authorization
string
header
required

User session JWT (Bearer ). Must be paired with the X-Team-ID request header on team-scoped endpoints so the server knows which team's resources to operate on.

Headers

X-Team-ID
string<uuid>
required

UUID of the team to scope the request to. Required on all team-scoped JWT endpoints because a user may belong to multiple teams.

Example:

"019abc12-4567-7890-abcd-ef1234567891"

Path Parameters

credentialId
string<uuid>
required

UUID of the credential row — the id field returned by POST /credentials (CreateCredentialResponse) or GET /credentials (CredentialListItem).

This is not the raw secret (the sk- / ak- / dk- string returned once at creation) and not the key_prefix (the first 12 characters of that secret). Passing either of those produces a 400; we never accept the secret itself in a URL.

Example:

"019abc12-7890-7890-abcd-ef1234567894"

Response

Credential revoked successfully. No content returned.