LIlightsparkdev
Embedded Wallet Auth

Revoke a delegated signing key

Changed on

Revoke an ACTIVE delegated signing key, or an agent's PENDING key. Revoking a PENDING agent key only discards Grid's key material. An active card using this funding source becomes PENDING_AUTH with statusReason: "DELEGATION_REQUIRED". Frozen and closed cards retain their status. Grid uses the custodied delegated key to authorize deleting its own signer identity. Deleting the identity also removes its API key, after which the delegated key can no longer sign. The response is 204 when revocation completes.

The underlying signing policies are left in place. Their consensus references the now-deleted signer identity, so they can never authorize anything, and deleting them is unnecessary for correctness or security.

delete/auth/delegated-keys/{id}

Request

  • Base URL
    https://api.lightspark.com/grid/2025-10-13
  • URL
    https://api.lightspark.com/grid/2025-10-13/auth/delegated-keys/{id}
  • Auth
    HTTP basic

Path parameters

idstring required

The id of the delegated key to revoke (the id field of the DelegatedKey returned from POST /auth/delegated-keys).

Response

Delegated key revoked. The key can no longer authorize signing.

Changes

  • d996ddfb9d2bRevision changes
    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

  • 715332dcb111Revision changes
    • warning

      added the new EXACT_AMOUNT_UNAVAILABLE enum value to the response property for the response status