---
title: "Reaffirm a suspended function"
method: POST
path: "/functions/{id}/runtime-key/reaffirm"
tags: ["Functions"]
---

# Reaffirm a suspended function

`POST /functions/{id}/runtime-key/reaffirm`

## Request

- Base URL: `https://api.primitive.dev/v1`
- URL: `https://api.primitive.dev/v1/functions/{id}/runtime-key/reaffirm`
- Auth: HTTP bearer

Lift the suspensions the caller may decide on the function's key (for example one left by a member removal or a grant reduction) and redeploy it. key_suspension_reasons lists any that remain. A function transferred to a new owner while it was stopped is not redeployed: lifting that stop places the transfer's own stop (transfer_stop_placed), which a redeploy lifts, or a further reaffirm by someone who covers its key that names it in the body (suspended_at and suspended_by 'transfer'): that reaffirm accepts the code the previous owner deployed. The body may name any stop the caller saw; a stop that is not the function's stop now lifts nothing.

## Path parameters

- `id` string, uuid, required

## Headers

- `Idempotency-Key` string

## Request body

- ReaffirmFunctionRuntimeKeyRequest
  - `suspended_at` string, date-time
  - `suspended_reason` string, nullable
  - `suspended_by` 'transfer' | 'access_decision' | 'owner_or_admin' | 'other', nullable

## Response `200`

Reaffirm a suspended function

- object
  - `success` true, required
  - `data` ReaffirmFunctionRuntimeKeyResult, required
    - `mode` 'org_shared' | 'per_function', required
    - `preset` string, nullable, required
    - `permissions` string[], nullable, required
    - `mail_scope` unknown, required
    - `attached_secret_keys` string[], nullable, required
    - `key_prefix` string, nullable, required
    - `expires_at` string, nullable, required
    - `suspended_at` string, nullable, required
    - `suspended_reason` string, nullable, required
    - `function_bound_key` 'live' | 'revoked', nullable
    - `suspended_by` 'transfer' | 'access_decision' | 'owner_or_admin' | 'other', nullable
    - `stop_rank` 'owner' | 'admin', nullable
    - `key_suspension_reasons` string[]
    - `transfer_stop_placed` boolean

## Other responses

- `400`: Invalid request parameters
- `401`: Invalid or missing API key
- `403`: forbidden: an owner or admin placed the stop (details.reason owner_or_admin_stop, details.stop_rank owner or admin), which only someone of at least that role lifts, signed in to the dashboard; or an access decision did (access_stop_needs_owner), which only an owner or admin lifts there
- `404`: Resource not found
- `409`: stop_changed: the stop is not the one the request named, or a transfer's stop was not named; details.stop is the runtime key as it is now
- `429`: Rate limit exceeded. The `ratelimit-*` headers describe the limiter that rejected this request, with its own limit and window, not the API budget that successful responses report. A limiter that reports only a wait sends `Retry-After` alone.

---

[API](https://skmtc.dev/primitive/apis/primitive-api.md) - [All operations](https://skmtc.dev/primitive/apis/primitive-api/llms.txt) - [OpenAPI document](https://skmtc.dev/primitive/apis/primitive-api/revisions/bce409c97acb?raw)