---
title: "Undo Capture"
method: POST
path: "/api/credentials/captures/undo"
tags: ["credentials"]
---

# Undo Capture

`POST /api/credentials/captures/undo`

## Request

- Base URL: `https://app.thinqos.com` (the document declares no server; this is the origin it was published from)
- URL: `https://app.thinqos.com/api/credentials/captures/undo`
- Auth: none declared

Put back a secret thinqOS vaulted out of something you just sent.

Spend the one-use token from the capture chip. The original text is restored
from the vault, and when nothing else references the credential it is shred
rather than left behind. Tokens last 15 minutes and work once.

## Headers

- `x-impersonate-identity-id` string, nullable

## Request body

- UndoCaptureRequest
  - `token` string, required

## Response `200`

Successful Response

- UndoCaptureResponse
  - `credential_id` string, uuid, required
  - `ref_kind` string, required
  - `ref_id` string, uuid, required
  - `restored` boolean, required
  - `credential_retired` boolean, required
  - `remaining_references` integer, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/thinqos/apis/thinqos-api.md) · [All operations](https://skmtc.dev/thinqos/apis/thinqos-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thinqos/apis/thinqos-api/revisions/ce2c2ce318b1?raw)