---
title: "Admin Qa Deny"
method: POST
path: "/admin/qa-grant-denylist"
---

# Admin Qa Deny

`POST /admin/qa-grant-denylist`

## Request

- Base URL: `https://api.local-mcp.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.local-mcp.com/admin/qa-grant-denylist`
- Auth: none declared. Required headers: `x-admin-key`

Refuse a QA grant serial (32 hex) or a QA key id from now on, on /oauth/qa-approve, and
revoke what was already issued under it (review C2), in the same transaction: the QA access
tokens of every (machine, AI) it approved are revoked, their QA refresh tokens and unused QA
codes deleted. Normal (non-QA) credentials of the same machine and AI are left alone.

## Headers

- `x-admin-key` string, required

## Request body

- QaDenyEntry
  - `kind` string, required
  - `value` string, required
  - `reason` string

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/local-mcp/apis/lmcp-api.md) · [All operations](https://skmtc.dev/local-mcp/apis/lmcp-api/llms.txt) · [OpenAPI document](https://skmtc.dev/local-mcp/apis/lmcp-api/revisions/f1f1c502623a?raw)