---
title: "Revoke one issued action capability"
method: POST
path: "/v1/capabilities/{id}/revoke"
tags: ["Capabilities"]
---

# Revoke one issued action capability

`POST /v1/capabilities/{id}/revoke`

## Request

- Base URL: `https://api.thrd.email`
- URL: `https://api.thrd.email/v1/capabilities/{id}/revoke`
- Auth: HTTP bearer

Requires the agent API key bound to the capability owner. Tenant, agent and environment are derived from authenticated server context; caller-supplied authority fields are rejected.

## Path parameters

- `id` string, uuid, required

## Request body

- object

## Response `200`

The capability is durably revoked or was already revoked.

- object
  - `capability_id` string, uuid, required
  - `status` 'revoked', required
  - `revoked_at` string, date-time, required

## Other responses

- `400`: Strict revocation request invalid
- `401`: Agent authentication missing or invalid
- `403`: Required agent scope missing
- `404`: Capability not found for this agent
- `409`: Capability already used or not revocable
- `410`: Capability expired
- `503`: Capability feature or authority unavailable

---

[API](https://skmtc.dev/thrd/apis/thrd-agent-email-api.md) · [All operations](https://skmtc.dev/thrd/apis/thrd-agent-email-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thrd/apis/thrd-agent-email-api/revisions/d8a88129cd34?raw)