Developers
Credentials

Delete a credential

DELETE/credentials/{credential_id}

Deletes a revoked or expired credential. After deletion, the credential is no longer returned by the API, while audit records that reference it are preserved.

Credentials that are still valid cannot be deleted and return the state_conflict error code. Revoke the credential with the update operation first.

A credential cannot delete itself.

Authorization

AuthorizationBearer <token>

Autonomous mode: the API credential secret, sent as a bearer token. Credential secrets are identified by a fixed prefix.

In: header

Path Parameters

credential_id*string

Response Body

application/json

application/json

application/json

application/json

curl -X DELETE "https://example.com/credentials/string"
Empty

Update a credential PATCH

Updates the `name`, `purpose`, or `expires_at` of a credential, or changes its `status`. Setting `status` to `inactive` suspends the credential, and setting it to `active` reactivates it. Setting `status` to `revoked` permanently revokes the credential; revocation cannot be undone. Send the `ETag` returned by the retrieve operation in the `If-Match` header to avoid overwriting a newer version. A credential cannot update itself.

List credential policies GET

Returns the policies in the credential's active policy revision, one item per policy. A credential without policies returns an empty collection.