---
title: "Unlink a ticket from a secret incident, public incident or honeytoken"
method: DELETE
path: "/v1/incidents/secrets/{resource_id}/destination-tickets/{ticket_id}"
tags: ["Internal Secret Incidents"]
---

# Unlink a ticket from a secret incident, public incident or honeytoken

`DELETE /v1/incidents/secrets/{resource_id}/destination-tickets/{ticket_id}`

## Request

- Base URL: `https://api.gitguardian.com`
- URL: `https://api.gitguardian.com/v1/incidents/secrets/{resource_id}/destination-tickets/{ticket_id}`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer

Remove the link between a resource and a ticket previously created on an external
platform (Jira, ServiceNow). The ticket itself is left untouched on the external
platform: only the association with the resource is removed.

The `resource_type` query parameter selects the kind of resource `resource_id`
designates: a secret incident, a public secret incident or a honeytoken.

`ticket_id` is the ticket's display ID on the external platform (for example
`PROJ-42` for Jira or `INC0008111` for ServiceNow), as exposed by the `id` of the
incident's `destination_tickets` entries.

If the same ticket is linked to the resource through several configurations,
every one of those links is removed.

The scope needed depends on the resource: `incidents:write` for secret and public
secret incidents, `honeytokens:write` for honeytokens. Unlinking from a public
secret incident requires Public Monitoring to be active on the workspace, and
unlinking from a honeytoken requires honeytokens to be enabled and, for a personal
access token, a manager role.

## Path parameters

- `resource_id` string, required
- `ticket_id` string, required

## Query parameters

- `resource_type` 'secret-incidents' | 'public-secret-incidents' | 'honeytokens', required

## Response `204`

The ticket was unlinked successfully.

## Other responses

- `400`: The `resource_type` query parameter is missing or invalid.
- `401`: Invalid API key
- `403`: Permission denied
- `404`: Resource or ticket not found.
- `503`: API under maintenance

## Changes

- **2026-11-02** `5829df7b9045`: 2 info
  - the security scope `incidents:write` was added to the endpoint's security scheme `api-key`
  - the security scope `honeytokens:write` was removed from the endpoint's security scheme `api-key`
- **2026-10-30** `0066824283bd`: 2 info
  - the security scope `incidents:write` was added to the endpoint's security scheme `api-key`
  - the security scope `honeytokens:write` was removed from the endpoint's security scheme `api-key`
- **2026-10-28** `43a546678f60`: 2 info
  - the security scope `incidents:write` was added to the endpoint's security scheme `api-key`
  - the security scope `honeytokens:write` was removed from the endpoint's security scheme `api-key`
- **2026-10-27** `13e7ff1b964d`: 2 info
  - the security scope `incidents:write` was added to the endpoint's security scheme `api-key`
  - the security scope `honeytokens:write` was removed from the endpoint's security scheme `api-key`
- **2026-10-26** `71d7f0a47a8e`: 2 info
  - the security scope `incidents:write` was added to the endpoint's security scheme `api-key`
  - the security scope `honeytokens:write` was removed from the endpoint's security scheme `api-key`

[Operation history](https://skmtc.dev/gitguardian/apis/gitguardian-api/changes/v1/incidents/secrets/:resource_id/destination-tickets/:ticket_id/delete.md)

---

[API](https://skmtc.dev/gitguardian/apis/gitguardian-api.md) - [All operations](https://skmtc.dev/gitguardian/apis/gitguardian-api/llms.txt) - [OpenAPI document](https://skmtc.dev/gitguardian/apis/gitguardian-api/revisions/5829df7b9045?raw)