Deletes the caller's account, per app: a verified key revokes every key of the identity behind it that carries the same label (each MapMap app labels its own key), and, when no other active key remains on the identity, deletes the account itself and erases its email, IP addresses and user agents. An unverified (`provisional`) key revokes only itself, and deletes the account only when it is the account's sole key: anyone who types an address can mint one, so it never speaks for the account. On the store-review identity any key deletes only itself, because that address is not a secret (security check M3). Idempotent: a retry with the same, now revoked, key answers 200 with `already_deleted`.
Authority is the key itself, presented as Authorization: Bearer snk_…. Refused for operator keys (403), OAuth access tokens (403: a connected app must not be able to delete the account it was granted), maps-scoped browser keys (403, by the scope classifier) and a key in ?api_key= (400: the key is revoked by this call, but it should not land in access logs on the way).
Request
- Base URL: https://api.mapmap.ai
- URL: https://api.mapmap.ai/v1/keys/self
- Auth: HTTP bearer
Response
Deleted (or already deleted by an earlier call with this key): a verified key revokes the keys sharing its label, and when no other active key remains the account's personal data is erased too; an unverified key revokes only itself, and erases the account only when it is its sole key. The body lists what was erased, what is kept and how many keys remain; for an unverified key (key_verified: false) it is the same whichever happened, with email_erased, keys_remaining and forfeited_credit_pence null
Changes
No recorded changes to this operation across all 1 revision of this API.