Revoke a credential you issued to a customer

Revoke one key minted by the calling API key for this business, preserving its audit history.

key_id is required and must be a UUID. The business must belong to this workspace and the key must have been minted by this exact caller for that business; all other keys return 404.

Idempotent: an already-revoked matching key returns 200 with already_revoked:true, preserving its original revocation timestamp and writing no duplicate audit event.

SDK revokeKey support follows in the next SDK release; call this REST endpoint until then. Keys created in the dashboard or before minter attribution was recorded must be managed in the dashboard.

delete/api/v1/businesses/{id}/keys

Request

Base URL: https://app.blueticked.com
URL: https://app.blueticked.com/api/v1/businesses/{id}/keys
Auth: HTTP bearer

Path parameters

idstring required

The resource's unique identifier.

Query parameters

key_idstring uuid required

Filter by key_id.

Response

Success

idstring uuid required

revokedboolean required

already_revokedboolean required

request_idstring required

Example response

{
  "id": "44444444-4444-4444-9444-444444444444",
  "revoked": true,
  "request_id": "req_b2e3d610e10f1b07468721ee98f0e1d2"
}

Changes

No recorded changes to this operation across all 1 revision of this API.