Skip to main content
DELETE
/
identity-records
/
{ir}
/
credentials
/
{credentialId}
Remove a Passkey Credential
curl --request DELETE \
  --url https://api.central.consent/v1/identity-records/{ir}/credentials/{credentialId} \
  --header 'Authorization: Bearer <token>'
{
  "response": {
    "resource": "/v1/access-records/ak_691df0c788ca043403b7fa90",
    "timestamp": "2026-03-11T12:00:00Z",
    "transaction-id": "tid_691df0c788ca043403b7fa90"
  },
  "errors": [
    {
      "error-code": "VAL001",
      "message": "Field 'mpxn' does not match the required pattern."
    }
  ]
}

Authorizations

​
Authorization
string
header
required

JWT from GET /auth/token. Pass as Authorization: Bearer <token>. Expires after 7200s.

Path Parameters

​
ir
string
required

Unique opaque identifier for an Identity Record, issued by the register on creation. Referenced from record-metadata.identity-record-ref on an AccessRecord to link the two resources.

Pattern: ^ir_[0-9a-f]{24}$
Example:

"ir_a3c5e7f9b1d3a3c5e7f9b1d3"

​
credentialId
string
required

Unique identifier for a registered passkey credential.

Pattern: ^cred_[0-9a-f]{24}$
Example:

"cred_1a2b3c4d5e6f1a2b3c4d5e6f"

Response

Credential removed. No response body.

Last modified on March 25, 2026