v1

latestOpenAPI 3.1.02026-08-047829.9 KB

Revoke a mandate

Immediately revoke an active or pending_approval mandate. Once revoked, no further credential requests will be accepted. Any virtual cards already issued remain valid until their own expires_at — revocation does not cancel in-flight transactions. Only callable by the mandate owner, not the agent.

post/mandates/{id}/revoke

Path parameters

idstring required

Response

Mandate revoked

idstring required

Unique mandate ID.

owner_idstring required

ID of the human user who owns and approved this mandate.

agent_idstring required

ID of the AI agent authorized to request credentials under this mandate.

status'pending_approval' | 'active' | 'exhausted' | 'expired' | 'revoked' required

pending_approval = created, awaiting human approval. active = approved, credential requests accepted. exhausted = once mandate fully used. expired = past expires_at. revoked = manually cancelled.

approved_atstring date-time nullable

When the human owner approved the mandate.

created_atstring date-time required

expires_atstring date-time nullable

metadataobject

Up to 10 key-value string pairs. Use to record user instruction, task context, etc.

x-ap2-notestring

In a future AP2-compatible version, this mandate will be issued as a signed Intent Mandate VDC and approved_at will carry a cryptographic attestation.