---
title: "Revoke Grant"
method: POST
path: "/api/v1/config/secrets/revoke-grant"
tags: ["secrets"]
---

# Revoke Grant

`POST /api/v1/config/secrets/revoke-grant`

## Request

- Base URL: `https://memory.kagura-ai.com` (the document declares no server; this is the origin it was published from)
- URL: `https://memory.kagura-ai.com/api/v1/config/secrets/revoke-grant`
- Auth: none declared

Revoke one recipient's grant; sets rotation_needed (revoke ≠ un-share).

## Headers

- `authorization` string, nullable

## Request body

- RevokeGrant: Revoke one recipient's grant on a secret (flags rotation_needed).
  - `name` string, required
  - `recipient_pubkey_id` string, uuid, required

## Response `200`

Successful Response

- SecretMetaResponse: Secret metadata — never includes the value.
  - `name` unknown, required
  - `status` unknown, required
  - `rotation_needed` unknown, required
  - `current_version` unknown, required
  - `grant_count` unknown, required
  - `created_at` unknown, required
  - `updated_at` unknown, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/kagura-ai/apis/kagura-memory-cloud.md) · [All operations](https://skmtc.dev/kagura-ai/apis/kagura-memory-cloud/llms.txt) · [OpenAPI document](https://skmtc.dev/kagura-ai/apis/kagura-memory-cloud/revisions/09f17f5ada29?raw)