---
title: "Revoke a member's headset sign-off"
method: DELETE
path: "/api/headsets/attest"
tags: ["headsets"]
---

# Revoke a member's headset sign-off

`DELETE /api/headsets/attest`

## Request

- Base URL: `https://www.immersivecommons.com`
- URL: `https://www.immersivecommons.com/api/headsets/attest`
- Auth: one of:
  - API key in cookie `__session`
  - HTTP bearer

Clerk session, or agt_ token with `headsets:lend` (live tier re-checked). The CALLER must already be attested. Idempotent: revoking someone who had no record still returns 200, with `was_present: false` and no `record`.

## Request body

- HeadsetRevokeAttestRequest
  - `subject_user_id` string, required
  - `reason` string

## Response `200`

Revoked (or there was nothing to revoke).

- HeadsetRevokeAttestResponse
  - `ok` boolean, required
  - `was_present` boolean, required: False when there was no attestation to revoke — still a 200.
  - `record` HeadsetAttestationRecord: The stored attestation for one member — who signed them off, when, and any notes.
    - `subject_user_id` string
    - `subject_name` string
    - `by_user_id` string
    - `by_name` string
    - `notes` string
    - `attested` boolean
    - `attested_at` string, date-time
    - `sop_completed_at` string, date-time

## Other responses

- `400`: Invalid JSON or missing subject_user_id.
- `401`: No auth.
- `403`: The caller is not attested.

---

[API](https://skmtc.dev/immersivecommons/apis/immersive-commons-agent-rest-api.md) · [All operations](https://skmtc.dev/immersivecommons/apis/immersive-commons-agent-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/immersivecommons/apis/immersive-commons-agent-rest-api/revisions/be67c1f67c27?raw)