---
title: "Schedule account deletion and revoke all existing sessions and API Keys"
method: DELETE
path: "/account"
tags: ["Account"]
---

# Schedule account deletion and revoke all existing sessions and API Keys

`DELETE /account`

## Request

- Base URL: `https://api.flashdata.dev/v2`
- URL: `https://api.flashdata.dev/v2/account`
- Auth: API key in cookie `__Host-fd_session` and API key in header `X-CSRF-Token`

Administrator accounts must have their platform role revoked through the audited operator workflow before deletion can be scheduled. A unique active deletion request is the natural idempotency boundary. Concurrent authenticated schedules return the same request. After Session revocation, a lost response is recovered by logging into deletion_recovery mode and reading GET /account/deletion; revoked Sessions are never accepted for replay.

## Request body

- object
  - `password` string, required
  - `confirmation` 'DELETE', required

## Response `202`

Deletion scheduled; active sessions and keys revoked

- AccountDeletionRequest: User-safe deletion summary. Durable processor cursor and per-step metadata are internal operational state and are intentionally omitted.
  - `id` string, required
  - `status` 'scheduled' | 'cancelled' | 'processing' | 'completed' | 'failed', required
  - `requestedAt` string, date-time, required
  - `scheduledFor` string, date-time, required
  - `cancellable` boolean, required
  - `cancelledAt` string, date-time, nullable
  - `processingStartedAt` string, date-time, nullable
  - `completedAt` string, date-time, nullable
  - `failureCode` string, nullable
  - `billingCancellationStatus` 'not_required' | 'pending' | 'completed' | 'failed', required
  - `activeJobsAtRequest` integer, required
  - `retryable` boolean, required: True only when an Admin-audited processor retry is possible; it does not grant the user mutation access.

## Other responses

- `401`: Authentication required or invalid
- `403`: Authenticated but not permitted, or CSRF validation failed
- `409`: Resource state or idempotency conflict
- `422`: Request validation failed

---

[API](https://skmtc.dev/flashdata/apis/flashdata-customer-api.md) · [All operations](https://skmtc.dev/flashdata/apis/flashdata-customer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/flashdata/apis/flashdata-customer-api/revisions/109179fe9313?raw)
