Revoke a direct session share or pending invitation by email, regardless of permission level. Only the session owner can revoke shares.

Warning: this endpoint revokes readers, editors, and reviewers. It is not limited to the read-only entries returned by GET on this path: an editor or reviewer omitted from that list still loses their direct share when their email is deleted. Inspect higher-permission collaborators in the web interface before revoking access.

The operation is idempotent: when the email has no direct share or pending invitation, it returns revoked: false with 200 OK. Absence from the read-only share list alone does not imply there is nothing to revoke.

Example

curl -X DELETE https://elicit.com/api/v2/sessions/{sessionId}/shares \
  -H "Authorization: Bearer elk_live_your_key_here" \
  -H "Content-Type: application/json" \
  -d '{"email":"colleague@example.com"}'

{
  "email": "colleague@example.com"
}