---
title: "Revoke Device Credential"
method: POST
path: "/api/v1/admin/devices/{device_id}/credentials/revoke"
tags: ["device administration"]
---

# Revoke Device Credential

`POST /api/v1/admin/devices/{device_id}/credentials/revoke`

## Request

- Base URL: `https://api.brumby.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.brumby.com/api/v1/admin/devices/{device_id}/credentials/revoke`
- Auth: HTTP bearer

Revoke the device's active certificate and rewrite the broker CRL.

## Path parameters

- `device_id` string, required

## Request body

- CredentialRevoke: Cut the device off at the broker. Re-enrollment needs a new bootstrap token, which is the point.
  - `reason` string, required

## Response `200`

Successful Response

- CredentialRevokeResponse
  - `device_id` string, required
  - `revoked_serials` string[], required
  - `crl_written` boolean, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/brumby/apis/brumby-platform-api.md) - [All operations](https://skmtc.dev/brumby/apis/brumby-platform-api/llms.txt) - [OpenAPI document](https://skmtc.dev/brumby/apis/brumby-platform-api/revisions/fe185e20813e?raw)