revoke_device

Revoke a device

act entity tenant-private since 2026-10-01

Revokes one of the caller's devices: from then on it is refused on every call, the session it signed in on included, and it is sent no push. Its binding is kept as history. Revoking a revoked device changes nothing.

Contract

shape
entity
authority
act
evidence
none
subscription
false
permission
any one of: self.act (the signed-in caller, about themself only; it names no other user); a deactivated caller is refused first
idempotency
natural
emits
device.revoked
MCP tool
revoke_device
decision_set
approve, reject
REST
POST https://api.containertradehq.com/v1/cap/revoke_device

Through MCP this call returns an approval request first; see Approvals.

Idempotency: keyed by the contract's own inputs: the same inputs replay the first call's result

Inputs

nametyperequiredvalidation
binding_iduuidrequiredUUID
The device's binding, as list_devices names it.

Response

  • binding_id · string · The binding revoked.
  • revoked_at · string · When it was revoked.
  • destinations_retired · integer · Push destinations retired with it.
Full JSON Schema
{
  "type": "object",
  "properties": {
    "binding_id": {
      "type": "string",
      "pattern": "^[0-9A-Fa-f]{8}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{12}$",
      "format": "uuid",
      "description": "The binding revoked.",
      "x-data-class": "operational"
    },
    "revoked_at": {
      "type": "string",
      "format": "date-time",
      "description": "When it was revoked.",
      "x-data-class": "operational"
    },
    "destinations_retired": {
      "type": "integer",
      "minimum": 0,
      "description": "Push destinations retired with it.",
      "x-data-class": "operational"
    }
  },
  "required": [
    "binding_id",
    "revoked_at",
    "destinations_retired"
  ],
  "additionalProperties": false
}

Refusals

  • binding_not_found · 422 · no binding of the caller's has that id; another user's gets the same answer

The platform refusals apply to every call: version, authentication, authority, validation and rate limits, each in the same envelope.

Surfaces

DesktopF
MobileF
APIF
MCPF*
VoiceD2
PushF
OneBoxN
OutboundN
  • MCP: approval required
  • Voice: degraded: confirmation
  • OneBox: no document originates a revocation
  • Outbound: crosses to no counterparty

Events

Related

None.