---
title: "Remove an asset from an attack surface"
method: DELETE
path: "/v1/attacksurfaces/{attack_surface_id}/assets/{asset}"
tags: ["Exposure Management"]
---

# Remove an asset from an attack surface

`DELETE /v1/attacksurfaces/{attack_surface_id}/assets/{asset}`

## Request

- Base URL: `https://api.platform.censys.io`
- URL: `https://api.platform.censys.io/v1/attacksurfaces/{attack_surface_id}/assets/{asset}`
- Auth: HTTP bearer

Remove an asset that was added to an attack surface as a seed. Removing an asset that is not present is not an error.<br><br>This endpoint does not cost credits to execute.

## Path parameters

- `attack_surface_id` string, required: The ID of the attack surface, or the literal 'default' for your organization's attack surface. Obtain the attack surface ID using the list attack surfaces endpoint.
- `asset` string, required: The asset to remove, as an IP address, CIDR block, ASN, domain, or certificate SHA-256 fingerprint, the same way it was added and listed (for example 8.8.8.8, 8.8.8.0/24, AS15169 or censys.io). A '/' in the value must be URL-encoded as '%2F'.

## Query parameters

- `organization_id` string, uuid, required: The ID of a Censys organization to associate the request with. See the [Getting Started docs](https://docs.censys.com/reference/get-started#step-3-find-and-use-your-organization-id-optional) for more information.

## Headers

- `X-Organization-ID` string, uuid: The ID of a Censys organization to associate the request with. See the [Getting Started docs](https://docs.censys.com/reference/get-started#step-3-find-and-use-your-organization-id-optional) for more information. Note: The header parameter is supported for atypical use cases; we recommend always providing this field via the query parameter.

## Response `204`

Asset removed successfully

## Other responses

- `401`: Request does not contain a valid Authorization token
- `403`: User does not have permission to access this data
- `404`: Attack surface not found
- `409`: The Exposure Management API is not enabled, or the operation conflicts with the attack surface's current state.
- `422`: Invalid inputs, such as an asset that is not an IP address, CIDR block, ASN, domain, or certificate SHA-256 fingerprint
- `500`: Internal server error

## Changes

- **2026-11-03** `ec1686b0a36a`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/censys/apis/censys-platform-api/changes/v1/attacksurfaces/:attack_surface_id/assets/:asset/delete.md)

---

[API](https://skmtc.dev/censys/apis/censys-platform-api.md) - [All operations](https://skmtc.dev/censys/apis/censys-platform-api/llms.txt) - [OpenAPI document](https://skmtc.dev/censys/apis/censys-platform-api/revisions/ec1686b0a36a?raw)