---
title: "Delete Watch"
method: DELETE
path: "/api/watch/{watch_id}"
---

# Delete Watch

`DELETE /api/watch/{watch_id}`

## Request

- Base URL: `https://www.conceptio.app` (the document declares no server; this is the origin it was published from)
- URL: `https://www.conceptio.app/api/watch/{watch_id}`
- Auth: none declared

Delete one of the caller's watches and its event history.

Ownership is checked BEFORE either delete. ``watch_events`` carries no
owner column, so an unscoped ``delete ... where watch_id=?`` removed a
*guessable* other account's event history (an IDOR: the watch row was
owner-scoped, the events were not). A watch that is not the caller's is a
404 — the same answer ``get_watch``/``check_watch`` give — and neither
table is touched.

## Path parameters

- `watch_id` integer, required

## Headers

- `authorization` string, nullable
- `x-license-key` string, nullable
- `x-principal` string, nullable
- `x-api-key` string, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/conceptio/apis/conceptio-open-knowledge-api.md) · [All operations](https://skmtc.dev/conceptio/apis/conceptio-open-knowledge-api/llms.txt) · [OpenAPI document](https://skmtc.dev/conceptio/apis/conceptio-open-knowledge-api/revisions/eb73efec13b4?raw)