---
title: "Revoke an Agent Pool mTLS Certificate"
method: POST
path: "/agent-pools/{agent_pool}/mtls-certificates/{certificate_id}/actions/revoke"
tags: ["agent-pools-mtls-certificates"]
---

# Revoke an Agent Pool mTLS Certificate

`POST /agent-pools/{agent_pool}/mtls-certificates/{certificate_id}/actions/revoke`

## Request

- Base URL: `https://example.scalr.io/api/iacp/v3`
- URL: `https://example.scalr.io/api/iacp/v3/agent-pools/{agent_pool}/mtls-certificates/{certificate_id}/actions/revoke`
- Auth: HTTP bearer

Revokes an mTLS certificate by deactivating it. Agents presenting
this certificate will no longer be accepted when mTLS enforcement is
enabled on the pool.

## Path parameters

- `agent_pool` string, required
- `certificate_id` string, required

## Response `204`

Certificate revoked successfully.

## Other responses

- `403`: User unauthorized to perform this action.
- `404`: Agent pool or certificate not found.
- `409`: Certificate is already revoked.
- `4XX`: Client error.
- `5XX`: Server error.

---

[API](https://skmtc.dev/scalr/apis/scalr-iacp-api.md) - [All operations](https://skmtc.dev/scalr/apis/scalr-iacp-api/llms.txt) - [OpenAPI document](https://skmtc.dev/scalr/apis/scalr-iacp-api/revisions/d3e1dc85657a?raw)