--- title: "Undo a recovery" method: POST path: "/v1/recovery/operations/{operation}/revert" tags: ["Disaster Recovery"] --- # Undo a recovery `POST /v1/recovery/operations/{operation}/revert` ## Request - Base URL: `https://api.subscriby.net` - URL: `https://api.subscriby.net/v1/recovery/operations/{operation}/revert` - Auth: HTTP bearer ```bash curl -X POST https://api.subscriby.net/v1/recovery/operations/$OPERATION_ID/revert \ -H "Authorization: Bearer $SUBSCRIBY_TOKEN" \ -H "Idempotency-Key: $(uuidgen)" \ -H "Content-Type: application/json" \ -d '{"resource_id": "b73c5f21-9d80-4a6e-8215-4f70ce13a9d6"}' ``` Inside the undo window (`revert_window_ends_at` on the operation) a completed recovery can be undone. A **channel recovery** is undone one swap at a time: `resource_id` names the resource to put back on its old chat, and every active member is re-admitted there again; the operation reads `reverted` once its last standing swap is undone. An **account relink** is undone whole and takes no `resource_id`: sign-in moves back to the previous account, every browser session is signed out, and a `relink_disputed` incident opens for support. A **bot replacement** cannot be undone. Answers `200` with the operation, its `revertible` now `false`. Raises `recovery.operation_reverted`; a channel undo also moves the resource's place (`project.resource.updated` with `changes.space_id`) and an account undo opens the dispute incident (`recovery.incident_opened`). ## Path parameters - `operation` string, uuid, required ## Headers - `Idempotency-Key` string, uuid, required ## Request body - RevertRecoveryOperationRequest: Which part of a recovery to undo. A channel recovery is undone one swap at a time and names the resource; an account relink is undone whole and takes an empty body. - `resource_id` string, uuid, nullable: For a channel recovery, the resource to put back on its old chat; every active member is re-admitted there again. Omit it for an account relink. ## Response `200` 200 with the operation, its undo state updated. - object - `data` RecoveryOperationResource, required: A recovery operation: one recovery run by the creator, by the platform on their behalf, or on demand, with its undo state. - `id` string, required: The operation's id, the value the revert, nudge and notify endpoints take. - `kind` string, required: `account` (a sign-in relink), `bot` (a bot replacement) or `resources` (a channel swap). - `kind_label` string, required: The kind in the connector's own words, in the creator's language. - `status` string, required: `started` while the recovery runs, then `completed`, `failed` (with `failure_reason`) or `reverted`. - `status_label` 'In progress' | 'Completed' | 'Failed' | 'Reverted', required: The status in the creator's language. - `connector` string, nullable, required: The connector the recovery ran on, by key; null when it concerns no connector. - `project_id` string, nullable, required: The project concerned; null for an account relink. - `project_name` string, nullable, required: That project's name; null for an account relink. - `grant_id` string, nullable, required: The support grant that paid for the recovery when the self-service allowance was already spent; null otherwise. - `automatic` boolean, required: True when the platform ran the recovery on the creator's behalf, the failover they sleep through. - `on_demand` boolean, required: True for a Swap & Grant of a healthy resource, which spends no allowance. - `failure_reason` unknown, required - `started_at` string, required: When the recovery started, ISO 8601. The row exists from that moment, because it is the quota ledger and the audit trail at once. - `completed_at` string, nullable, required: When it finished, ISO 8601; null while running or after failing. - `reverted_at` string, nullable, required: When it was undone, ISO 8601; null otherwise. - `revertible` boolean, required: Whether the creator may still undo it **right now**: completed, of a kind that can be undone (an account relink or a channel swap, never a bot replacement), and inside the undo window. Show the undo exactly when this is true. - `revert_window_ends_at` string, nullable, required: When the undo window closes, ISO 8601; null for a recovery that cannot be undone. ## Other responses - `400`: `IDEMPOTENCY_KEY_MISSING`: every write needs an `Idempotency-Key` header. Send a fresh UUID per distinct operation. - `401`: `AUTHENTICATION_REQUIRED`: the request carries no bearer token, or one that is revoked, malformed, or minted for another environment (an `sbt_test_` token on production). - `403`: `TOKEN_MISSING_ABILITY`: the token is valid but does not carry the ability this endpoint requires; `error.context.required_ability` names the one to grant. An endpoint that also checks who owns a row or which tier the account is on answers `FORBIDDEN`, `TEAM_TIER_REQUIRED` or `CONNECTOR_TIER_REQUIRED` with the same status, and says so in its own description. - `404`: `RESOURCE_NOT_FOUND`: an id in the path names nothing the token can see. `TENANT_MISMATCH`: the project sits outside the token's `scope:project:` allow-list, or the token carries no team scope. Both answer 404 rather than 403 so that existence outside the token's scope cannot be inferred. On this endpoint: `RESOURCE_NOT_FOUND`: when `resource_id` is not a resource the token manages. - `409`: `IDEMPOTENCY_KEY_REUSED`: the key was already used in the last 24 hours with a different request body. - `422`: `VALIDATION_FAILED`: the payload broke a rule, and `error.fields` maps each offending key to its messages. A refusal from the domain, such as a plan that cannot go on sale or a member who cannot be removed, uses the same code with `error.message` saying why and no `fields`. On this endpoint: `VALIDATION_FAILED`: for a bot replacement, a channel recovery with no `resource_id`, a closed window, a swap already put back, or a recovery that is not the token owner's; `error.context.operation_id` names it. - `425`: `IDEMPOTENCY_REPLAY_IN_PROGRESS`: the first request with this key is still running; retry in a few seconds and the original response is replayed. - `429`: `RATE_LIMITED`: the token has spent its 300 requests a minute or 10,000 an hour; `Retry-After` says when the next one is accepted. --- [API](https://skmtc.dev/memberpass/apis/subscriby-rest-api.md) · [All operations](https://skmtc.dev/memberpass/apis/subscriby-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/memberpass/apis/subscriby-rest-api/revisions/7b538e472e9a?raw)