Lexicon Garden

dev.cocore.account.deleteApiKey

Hard-delete one of the authenticated account's API keys, removing the row entirely (no audit trail recovery afterwards). For most flows revokeApiKey is preferable; use this to clean up revoked or expired keys you no longer want listed. Scoped to the caller's DID. Idempotent: deleting an unknown key returns `deleted: false`.

Repository @cocore.dev did:plc:5quuhkmwe2q4k3azfsgg7kdz namespace authority
Details · procedure
Kindprocedure
Authorityaccount.cocore.dev
Indexed
Compare Edit in builder → Fork →

Procedure

procedure · POST

Input

application/json

id

requiredstring

The `id` of the key to delete (from createApiKey or listApiKeys).

  • minLength: 1
  • maxLength: 200

Output

application/json

deleted

requiredboolean

True if a key owned by the caller was deleted by this call; false if no matching key existed.

Errors

AuthRequired

No valid session cookie or bearer key was presented.

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • dev.cocore.account.revokeApiKey

    procedure

    Revoke one of the authenticated account's API keys. The key stops authenticating immediately, but the row is retained with `revokedAt` set so it stays visible in listApiKeys as a revoked key (audit trail). Use deleteApiKey to remove it entirely. Scoped to the caller's DID — you cannot revoke another account's key. Idempotent: revoking an already-revoked or unknown key returns `revoked: false`.

  • social.coves.aggregator.revokeApiKey

    procedure

    Revoke the authenticated aggregator's API key. After revocation, the aggregator must complete OAuth flow again to create a new API key. This action cannot be undone.

  • dev.cocore.account.listApiKeys

    query

    List every API key belonging to the authenticated account, most-recently-created first. The owning DID is derived from the credential presented (session cookie or `Authorization: Bearer cocore-...`); there is no way to list another account's keys. Secrets are never returned — see `apiKeyView`.

  • rip.pds.account.deleteAccount

    procedure

    Delete an account the caller minted, ahead of its expiry. The identity is retired as it would have been on expiry.

  • dev.cocore.account.defs

    Shared type definitions for dev.cocore.account.* methods.