v53

latestOpenAPI 3.0.3raw.githubusercontent.com2026-08-076771,7565.2 MB
Fleet enrollment API keys

Bulk revoke or delete enrollment API keys

Spaces method and path for this operation:

<div><span class="operation-verb post">post</span>&nbsp;<span class="operation-path">/s/{space_id}/api/fleet/enrollment_api_keys/_bulk_delete</span></div>

Refer to Spaces for more information.

Revoke or delete multiple enrollment API keys.<br/><br/>[Required authorization] Route required privileges: fleet-agents-all.

post/api/fleet/enrollment_api_keys/_bulk_delete

Headers

kbn-xsrfstring required
Example:true

A required header to protect against CSRF attacks

Request body

forceDeleteboolean

When false (default), invalidate the API key and mark the token as inactive. When true, also delete the token document.

includeHiddenboolean

When true, allow deletion of hidden enrollment tokens (managed/agentless policies). Defaults to false.

kuerystring

KQL query to select enrollment tokens to delete.

tokenIdsstring[]

List of enrollment token IDs to delete.

Response

Successful response

actionstring required
countnumber required
errorCountnumber required
successCountnumber required