---
title: "Forget the caller's verified email address."
method: DELETE
path: "/v1/me/email-verification"
tags: ["auth"]
---

# Forget the caller's verified email address.

`DELETE /v1/me/email-verification`

## Request

- Base URL: `http://localhost:8080`
- URL: `http://localhost:8080/v1/me/email-verification`
- Auth: one of:
  - API key in cookie `dvt_session`
  - HTTP bearer

DVT-5182. Clears `users.verified_email`, voids the caller's pending codes and forgets their
addresses; rate-limit rows are kept for 24h. Idempotent. Same guards as the request route
except the scope floor, and it does not require the mail transport: the address is always
cleared. When an address was removed and the transport is available, a notice that names
no address ("Your dvt report email was removed") is mailed to it after the response is
written, best-effort: a send failure is logged and audited, never retried, and never
fails the delete. Snowflake-native only (404 elsewhere).

## Response `204`

The verified address (if any) was cleared.

## Other responses

- `401`: Missing, invalid, or expired session.
- `403`: The caller's role does not permit this action.
- `404`: Resource does not exist.
- `415`: `Content-Type` is not `application/json`.

---

[API](https://skmtc.dev/dvt/apis/dvt-rest-api.md) · [All operations](https://skmtc.dev/dvt/apis/dvt-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/dvt/apis/dvt-rest-api/revisions/00016f504165?raw)
