Billing

Start account-deletion step-up

Starts a short-lived challenge for account deletion. oauth_reauth requires a later sign-in whose auth_time is newer than this challenge. email_otp sends a one-time code to the account email and is refused when a second factor is enrolled. The code itself is never returned.

post/v1/me/deletion-challenges

Request

Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
URL: /v1/me/deletion-challenges
Auth: HTTP bearer

Request body

methodstring required

oauth_reauth or email_otp.

Example request

{
  "method": "oauth_reauth"
}

Response

Challenge created.

challengeIdstring required

Challenge to verify.

expiresAtstring required

RFC3339 expiry.

methodstring required

oauth_reauth or email_otp.

mfaRequiredboolean required

When true, only a re-authentication that asserted MFA can verify the challenge.

Example response

{
  "challengeId": "5d0f7c1e-2a8b-4c1d-9f3e-7b6a5c4d3e2f",
  "expiresAt": "2026-09-15T10:10:00Z",
  "method": "oauth_reauth"
}

Changes

No recorded changes to this operation across all 50 revisions of this API.