Credentialrevocations Console
Request and response reference for POST /v1/console/operations/credential-revocations.
/v1/console/operations/credential-revocationsRequest
This entry point does not require an existing session. Applicable onboarding, origin and verification policies still apply.
curl -X POST "$OSAI_CONSOLE_BASE_URL/v1/console/operations/credential-revocations" \
-H "Content-Type: application/json" \
-H "Idempotency-Key: <stable-operation-key>" \
--data '{
"command_id": "<command_id>",
"resource_id": "<resource_id>",
"reason": "<reason>"
}'Parameters
| Name | Location | Requirement | Description |
|---|---|---|---|
Idempotency-Key | header · string | Required | Use the value defined for this resource. |
X-CSRF-Token | header · string | Required | Use the value defined for this resource. |
Request body
Send JSON with Content-Type: application/json. Nested field names identify their parent object; required markers apply within that object. Replace template values using the relevant resource and configured instrument rules.
| Field | Type | Description & constraints |
|---|---|---|
command_idRequired in parent object | string | Defined by the resource contract.Pattern: ^[A-Za-z0-9:_-]{1,128}$ |
resource_idRequired in parent object | string | Defined by the resource contract.Pattern: ^[A-Za-z0-9:_-]{1,128}$ |
reasonRequired in parent object | string | Defined by the resource contract. |
expected_updated_atOptional | stringdate-time | Defined by the resource contract. |
Responses
Inspect HTTP status before parsing a body. These tables describe client response fields rather than invented successful transaction payloads.
200 · Owner atomic effect and immutable receipt; replay queued is not delivery confirmation
| Field | Type | Description & constraints |
|---|---|---|
command_idRequired in parent object | string | Defined by the resource contract. |
resource_idRequired in parent object | string | Defined by the resource contract. |
institution_idRequired in parent object | string | Defined by the resource contract. |
membership_idRequired in parent object | string | Defined by the resource contract. |
statusRequired in parent object | string | Defined by the resource contract. |
recorded_atRequired in parent object | stringdate-time | Defined by the resource contract. |
400 · Invalid instruction
No client body fields are defined for this response.
401 · Human session required
No client body fields are defined for this response.
403 · Permission, recent MFA or CSRF required
No client body fields are defined for this response.
409 · State, version or command conflict
No client body fields are defined for this response.
503 · Disabled or outcome unknown; retry same command
No client body fields are defined for this response.
Retries & recovery
Keep the original request identifiers and any required idempotency key. A timeout does not establish failure. Read the original resource or command before another financial write; use expected versions for concurrent changes.