---
title: "TOTAL case deletion (GDPR Art. 17) · 0 credits · always free"
method: DELETE
path: "/api/v1/cases/{caseId}"
tags: ["Cases"]
---

# TOTAL case deletion (GDPR Art. 17) · 0 credits · always free

`DELETE /api/v1/cases/{caseId}`

## Request

- Base URL: `https://legal.nexusquantum.legal`
- URL: `https://legal.nexusquantum.legal/api/v1/cases/{caseId}`
- Auth: HTTP bearer

Owner-only. Scope ONLY `cases` or `*` — no `mcp` (deliberate: the maximum blast radius stays out of the connector; `purge` covers the ZR need from MCP). Mandatory confirmation `?confirm={caseId}` (it compensates for the absence of AAL2 on the API-key path). Deletes Storage originals + DB cascade (documents, chunks, Q&A, emails, parties, timeline). Encrypted outputs do NOT fall with the case (case_id → NULL): they belong to the user.

## Path parameters

- `caseId` string, uuid, required

## Query parameters

- `confirm` string, required

## Response `200`

{ ok: true }

## Other responses

- `400`: CONFIRM_REQUIRED (missing or mismatched)
- `403`: INSUFFICIENT_SCOPE (mcp-only key) | FORBIDDEN (not the owner)
- `404`: CASE_NOT_FOUND

---

[API](https://skmtc.dev/nexusquantum/apis/nexus-legal-api.md) · [All operations](https://skmtc.dev/nexusquantum/apis/nexus-legal-api/llms.txt) · [OpenAPI document](https://skmtc.dev/nexusquantum/apis/nexus-legal-api/revisions/4084d8d4eb0b?raw)