---
title: "Revoke a GDPR data request"
method: POST
path: "/gdpr-requests/{id}/revoke"
tags: ["GDPR Requests"]
---

# Revoke a GDPR data request

`POST /gdpr-requests/{id}/revoke`

## Request

- Base URL: `http://localhost:8000/api/shop`
- URL: `http://localhost:8000/api/shop/gdpr-requests/{id}/revoke`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/bagisto/apis/bagisto-shop-api/docs/gdpr-requests/:id/revoke/post.ts> (a function with typed inputs; its response is checked against the schema)

Revoke one of the customer's own GDPR data requests. Allowed only while the request is pending. Send an empty JSON body `{}`.

## Path parameters

- `id` string, required

## Headers

- `X-STOREFRONT-KEY` string, required
- `X-Locale` string
- `X-Channel` string
- `X-Currency` string

## Request body

- object

## Response `200`

Request revoked. `status` becomes `revoked` and `revokedAt` is stamped.

## Other responses

- `400`: Invalid input
- `422`: Request is not pending, so it cannot be revoked.

---

[API](https://skmtc.dev/bagisto/apis/bagisto-shop-api.md) - [All operations](https://skmtc.dev/bagisto/apis/bagisto-shop-api/llms.txt) - [OpenAPI document](https://skmtc.dev/bagisto/apis/bagisto-shop-api/revisions/f619df36bf29?raw)