---
title: "Revoke a credential"
method: POST
path: "/v1/credentials/{uuid}/revoke"
tags: ["Credentials"]
---

# Revoke a credential

`POST /v1/credentials/{uuid}/revoke`

Permanently revoke an issued credential. Revocation is terminal for the captured lifecycle. The response returns the updated credential record.

## Path parameters

- `uuid` string, required

## Request body

- object

## Response `200`

The credential was revoked.

- object
  - `uuid` string, uuid — Unique identifier of the issued credential.
  - `vct` string — VCT (Verifiable Credential Type) value of the issued credential.
  - `iss` string, uri — Issuer URL that issued the credential.
  - `status` string — Lifecycle status after the call.
  - `status_idx` integer — Status-list index assigned to the credential.
  - `issued_at` string, date-time — Timestamp when the credential was issued.
  - `expires_at` string, date-time — Timestamp when the credential expires.
  - `holder_cnf` object — Holder confirmation key as a JWK (JSON Web Key) object.
    - `kty` string — JWK (JSON Web Key) key type.
    - `crv` string — Elliptic curve name in the JWK (JSON Web Key).
    - `x` string — X coordinate of the key.
    - `y` string — Y coordinate of the key.
  - `source_session_id` string — Source Didit verification session identifier. The captured record uses an empty string when no source session is linked.

## Other responses

- `409` — Conflict — the requested lifecycle transition is not allowed from the current state. (Example: re-revoking a revoked credential.)

---

[API](https://skmtc.net/didit-protocol/apis/didit-credentials-api.md) · [All operations](https://skmtc.net/didit-protocol/apis/didit-credentials-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/didit-protocol/didit-credentials-api/versions/e4eddba66557/schema)