---
title: "Revoke one grant"
method: DELETE
path: "/v1/grants/{id}"
tags: ["connect"]
---

# Revoke one grant

`DELETE /v1/grants/{id}`

## Request

- Base URL: `https://api.runx.ai`
- URL: `https://api.runx.ai/v1/grants/{id}`
- Auth: HTTP bearer

## Path parameters

- `id` string, required

## Response `200`

Revoked grant.

- GrantRevokedEnvelope
  - `status` 'revoked', required
  - `grant` ConnectGrant, required
    - `grant_id` string, required
    - `principal_id` string, required
    - `provider` string, required: The provider namespace the grant and its authorization are keyed by, or a payment rail.
    - `account` string: The delegated account the grant holds, by name, when Connect recorded one.
    - `connector_binding` ConnectorBinding: An exact connector revision: its connector name, its manifest digest, and its connector digest over the manifest and the tool packages it runs. A grant lists the one Connect executes it under; a provider operation or request names the one its caller admitted, and Cloud refuses any other with operation_contract_mismatch.
      - `connector` string, required
      - `manifest_digest` string, required
      - `connector_digest` string, required
    - `scopes` string[], required
    - `scope_family` string
    - `authority_kind` 'read_only' | 'constructive' | 'destructive'
    - `target_repo` string
    - `target_locator` string
    - `auth_mode` 'oauth' | 'byo', required
    - `material_kind` 'provider_credential' | 'byo_credential', required
    - `credential_material_bound` boolean, required
    - `verification_status` 'pending' | 'verified' | 'failed'
    - `verified_at` string, date-time
    - `expires_at` string, date-time
    - `grant_reference` object
      - `grant_id` string, required
      - `scope_family` string, required
      - `authority_kind` 'read_only' | 'constructive' | 'destructive', required
      - `target_repo` string
      - `target_locator` string
    - `status` 'active' | 'expired' | 'revoked', required
    - `created_at` string, date-time, required

## Other responses

- `401`: Unauthorized.
- `404`: Grant not found.

---

[API](https://skmtc.dev/runx/apis/runx-hosted-api.md) · [All operations](https://skmtc.dev/runx/apis/runx-hosted-api/llms.txt) · [OpenAPI document](https://skmtc.dev/runx/apis/runx-hosted-api/revisions/6c940d8edacc?raw)