---
title: "Revoke Credential"
method: POST
path: "/vault/credentials/{credential_id}/revoke"
tags: ["Vault"]
---

# Revoke Credential

`POST /vault/credentials/{credential_id}/revoke`

## Request

- Base URL: `http://localhost:8000/api/v1`
- URL: `http://localhost:8000/api/v1/vault/credentials/{credential_id}/revoke`
- Auth: one of:
  - HTTP bearer
  - API key in header `Authorization`
- TypeScript: <https://skmtc.dev/deeptrail/apis/deepsecure-api-dual-service-architecture/docs/vault/credentials/:credential_id/revoke/post.ts> (a function with typed inputs; its response is checked against the schema)

Revoke an existing credential by setting its revoked_at timestamp.
This immediately invalidates the credential across all services.

## Path parameters

- `credential_id` string, uuid, required

## Response `200`

Credential revoked successfully

- CredentialRevokeResponse
  - `credential_id` string, uuid
  - `status` 'revoked' | 'already_revoked' | 'revocation_failed'

## Other responses

- `401`: Unauthorized - Invalid or missing authentication
- `404`: Credential not found
- `500`: Internal Server Error - Unexpected server error

---

[API](https://skmtc.dev/deeptrail/apis/deepsecure-api-dual-service-architecture.md) - [All operations](https://skmtc.dev/deeptrail/apis/deepsecure-api-dual-service-architecture/llms.txt) - [OpenAPI document](https://skmtc.dev/deeptrail/apis/deepsecure-api-dual-service-architecture/revisions/78627360c082?raw)