---
title: "Erase Confirm"
method: POST
path: "/api/gdpr/erase-confirm"
tags: ["GDPR", "GDPR"]
---

# Erase Confirm

`POST /api/gdpr/erase-confirm`

Consume an erasure token issued by /erase-request and execute
the erasure. Rejects expired, mismatched, or malformed tokens
with 400.

When GDPR_ERASURE_ENABLED is FALSE (production default), returns
503 even before token validation — prevents an oracle leak
about token internals.

## Request body

- EraseConfirmBody
  - `token` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/primetime/apis/primetime-media-api.md) · [All operations](https://skmtc.dev/primetime/apis/primetime-media-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/primetime/primetime-media-api/revisions/9da9a9f64e11/schema)