---
title: "Revoke Credential"
method: POST
path: "/vault/credentials/{credential_id}/revoke"
tags: ["Vault"]
---

# Revoke Credential

`POST /vault/credentials/{credential_id}/revoke`

Revoke an existing credential by setting its revoked_at timestamp.
This immediately invalidates the credential across all services.

## Path parameters

- `credential_id` string, uuid, required

## Response `200`

Credential revoked successfully

- CredentialRevokeResponse
  - `credential_id` string, uuid
  - `status` 'revoked' | 'already_revoked' | 'revocation_failed'

## Other responses

- `401` — Unauthorized - Invalid or missing authentication
- `404` — Credential not found
- `500` — Internal Server Error - Unexpected server error

---

[API](https://skmtc.net/deeptrail/apis/deepsecure-api-dual-service-architecture.md) · [All operations](https://skmtc.net/deeptrail/apis/deepsecure-api-dual-service-architecture/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/deeptrail/deepsecure-api-dual-service-architecture/revisions/78627360c082/schema)