Revoke a personal API key or MCP grant
curl --request DELETE \
--url https://posted-api.example.com/api/credentials/{id} \
--header 'Origin: <origin>' \
--cookie posted_session=import requests
url = "https://posted-api.example.com/api/credentials/{id}"
headers = {
"cookie": "posted_session=",
"Origin": "<origin>"
}
response = requests.delete(url, headers=headers)
print(response.text)const options = {method: 'DELETE', headers: {cookie: 'posted_session=', Origin: '<origin>'}};
fetch('https://posted-api.example.com/api/credentials/{id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://posted-api.example.com/api/credentials/{id}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "DELETE",
CURLOPT_COOKIE => "posted_session=",
CURLOPT_HTTPHEADER => [
"Origin: <origin>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://posted-api.example.com/api/credentials/{id}"
req, _ := http.NewRequest("DELETE", url, nil)
req.Header.Add("cookie", "posted_session=")
req.Header.Add("Origin", "<origin>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.delete("https://posted-api.example.com/api/credentials/{id}")
.header("cookie", "posted_session=")
.header("Origin", "<origin>")
.asString();require 'uri'
require 'net/http'
url = URI("https://posted-api.example.com/api/credentials/{id}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Delete.new(url)
request["cookie"] = 'posted_session='
request["Origin"] = '<origin>'
response = http.request(request)
puts response.read_body{
"revoked": true
}{
"error": {
"code": "<string>",
"message": "<string>",
"requestId": "<string>"
}
}Revoke a personal API key or MCP grant
Revokes an owned credential. Team revocation also requires recent authentication; subsequent requests cannot use the revoked key or grant.
DELETE
/
api
/
credentials
/
{id}
Revoke a personal API key or MCP grant
curl --request DELETE \
--url https://posted-api.example.com/api/credentials/{id} \
--header 'Origin: <origin>' \
--cookie posted_session=import requests
url = "https://posted-api.example.com/api/credentials/{id}"
headers = {
"cookie": "posted_session=",
"Origin": "<origin>"
}
response = requests.delete(url, headers=headers)
print(response.text)const options = {method: 'DELETE', headers: {cookie: 'posted_session=', Origin: '<origin>'}};
fetch('https://posted-api.example.com/api/credentials/{id}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://posted-api.example.com/api/credentials/{id}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "DELETE",
CURLOPT_COOKIE => "posted_session=",
CURLOPT_HTTPHEADER => [
"Origin: <origin>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://posted-api.example.com/api/credentials/{id}"
req, _ := http.NewRequest("DELETE", url, nil)
req.Header.Add("cookie", "posted_session=")
req.Header.Add("Origin", "<origin>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.delete("https://posted-api.example.com/api/credentials/{id}")
.header("cookie", "posted_session=")
.header("Origin", "<origin>")
.asString();require 'uri'
require 'net/http'
url = URI("https://posted-api.example.com/api/credentials/{id}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Delete.new(url)
request["cookie"] = 'posted_session='
request["Origin"] = '<origin>'
response = http.request(request)
puts response.read_body{
"revoked": true
}{
"error": {
"code": "<string>",
"message": "<string>",
"requestId": "<string>"
}
}A signed-in human session is required. API keys and MCP bearer credentials cannot replace that session.
Revokes an owned credential. Team revocation also requires recent authentication; subsequent requests cannot use the revoked key or grant.
Request conventions · API keys · MCP connections
Authorizations
Signed-in human browser session; mutation requests also need the exact UI Origin
Headers
The exact configured Posted UI origin. Required for browser mutations carrying session cookies.
Path Parameters
The id from the corresponding list, record or authorization response.
Response
Successful response. Examples are illustrative; field values vary by record.
Was this page helpful?
