---
title: "Revoke a per-user-headers credential"
method: DELETE
path: "/api/mcp/per-user-headers/credential/{id}"
tags: ["MCP"]
---

# Revoke a per-user-headers credential

`DELETE /api/mcp/per-user-headers/credential/{id}`

Hard-deletes a per-user-headers credential row by primary key. Authorization
scoping is enforced server-side — callers may only delete credentials
visible to their identity.

The unified DELETE /api/mcp/sessions/{id} is the more convenient entry
point; this typed endpoint exists for callers that already know they're
acting on a header credential row.

## Path parameters

- `id` string, required

## Response `204`

Revoked

## Other responses

- `401` — Unauthorized — missing or invalid credentials
- `404` — Resource not found
- `500` — Internal server error

---

[API](https://skmtc.net/getbifrost/apis/bifrost-api.md) · [All operations](https://skmtc.net/getbifrost/apis/bifrost-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/getbifrost/bifrost-api/versions/f8cab88f64ea/schema)