---
title: "Delete the calling account (GDPR erasure); confirmEmail must match"
method: DELETE
path: "/api/me"
tags: ["Users"]
---

# Delete the calling account (GDPR erasure); confirmEmail must match

`DELETE /api/me`

## Request

- Base URL: `https://tre-app.com`
- URL: `https://tre-app.com/api/me`
- Auth: one of:
  - API key in cookie `__Secure-authjs.session-token`
  - API key in cookie `authjs.session-token`

Requires the authenticated web session; every Bearer token, including admin scope, receives 403 FORBIDDEN (Account deletion requires the web session). Irreversible. Refused with 409 while the caller is the only owner of a workspace that still has other members — transfer ownership or delete those workspaces first. A second, rarer 409 (`Workspace memberships changed while deleting — try again`) means a workspace membership changed while the deletion ran: no account or workspace was deleted, and the same call can be sent again. Sole-member workspaces are deleted along with the account. confirmEmail must be sent as a JSON body.

## Request body

- AccountDeleteConfirm
  - `confirmEmail` string, email, required

## Response `204`

No content

## Other responses

- `400`: Invalid request
- `401`: Unauthenticated
- `403`: Account deletion requires the web session; Bearer tokens cannot delete accounts
- `404`: Not found
- `409`: Conflict
- `429`: Rate limited
- `500`: Internal server error
- `503`: Temporarily unavailable

---

[API](https://skmtc.dev/tre-app/apis/tre-rest-api.md) · [All operations](https://skmtc.dev/tre-app/apis/tre-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tre-app/apis/tre-rest-api/revisions/26a7187a05fc?raw)