---
title: "Revoke a credential"
method: POST
path: "/v1/credentials/{uuid}/revoke"
tags: ["Credentials"]
---

# Revoke a credential

`POST /v1/credentials/{uuid}/revoke`

Permanently revoke an issued credential. Sets its status to `revoked` and flips its bit in the tenant's IETF Token Status List, so any verifier that fetches the status list will reject it from this point on. Revocation is final — unlike suspension it cannot be reversed by reactivation. Takes no request body. The credential must belong to the authenticated tenant; otherwise the request returns 404. Requires Authorization: Bearer <tenant API key>.

## Path parameters

- `uuid` string, uuid, required

## Response `200`

The credential was revoked. Returns the updated issued-credential record with status `revoked`.

- object
  - `uuid` string, uuid — Unique identifier of the issued credential.
  - `vct` string — Verifiable Credential Type of the credential.
  - `iss` string — Issuer identifier (the https iss URL) of the tenant that issued the credential.
  - `status` 'issued' | 'suspended' | 'revoked' | 'expired' — Lifecycle status after the call; `revoked` on success.
  - `status_idx` integer, nullable — Index of this credential in the tenant's status list, where the revocation bit was just set. Null for non-revocable credentials.
  - `issued_at` string, date-time — ISO 8601 timestamp when the credential was issued.
  - `expires_at` string, date-time, nullable — ISO 8601 timestamp when the credential expires. Null if no expiry.
  - `holder_cnf` object — The holder key-binding confirmation (cnf) object that binds the credential to its holder.
  - `source_session_id` string — Identifier of the Didit verification session this credential was bridged from, or an empty string if none.

## Changes

- **2026-06-30** `1ee4908e9af4` — 1 info
  - added the media type `application/json` for the response with the status `200`

[Change history](https://skmtc.dev/didit-protocol/apis/didit-credentials-api/changes/v1/credentials/:uuid/revoke/post.md)

---

[API](https://skmtc.dev/didit-protocol/apis/didit-credentials-api.md) · [All operations](https://skmtc.dev/didit-protocol/apis/didit-credentials-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/didit-protocol/didit-credentials-api/revisions/2eeb13158ffa/schema)