---
title: "Remove an organization logo"
method: DELETE
path: "/v1/organizations/{id}/logo"
tags: ["Organizations"]
---

# Remove an organization logo

`DELETE /v1/organizations/{id}/logo`

## Request

- Base URL: `https://api.squirrelscan.com`
- URL: `https://api.squirrelscan.com/v1/organizations/{id}/logo`
- Auth: HTTP bearer

Owner/admin only. Deletes the stored logo and clears `organizations.avatarUrl`.

## Path parameters

- `id` string, required

## Response `200`

Logo removed; `avatarUrl` is now null.

- object
  - `avatarUrl` unknown, required

## Other responses

- `401`: Missing or invalid credentials (including the shared auth middleware: no/invalid bearer token). Typed envelope with code `UNAUTHORIZED`. Branch on the `401` status, not the message.
- `403`: Authenticated but not permitted (e.g. not a member of the requested organization). Typed envelope; code `FORBIDDEN`, or `NO_ORG` when no active organization is resolved on credit/org-scoped routes. Branch on the `403` status.
- `404`: Resource not found (or hidden from the caller).
- `429`: Too many requests. Retry after the window resets. (Rate limiting is planned — issue #69 — these headers document the intended contract.)

---

[API](https://skmtc.dev/squirrelscan/apis/squirrelscan-public-api.md) · [All operations](https://skmtc.dev/squirrelscan/apis/squirrelscan-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/squirrelscan/apis/squirrelscan-public-api/revisions/82c8183fe8bc?raw)