metadata: version: "1.0.0"

Revoke Credential

Revoke an issued credential, rendering it invalid for future verification.

API

POST /api/credentials/{id}/revoke
Authorization: Bearer {api-token}
Content-Type: application/json
 
{ "reason": "Employee left the organization" }

Response

{ "success": true, "credential": { "id": 42, "revoked": true } }

MCP Tool

revoke_credential — available via @certo/mcp

{
  "credential_id": 42,
  "reason": "Employee left the organization"
}

Notes

• Requires an API token with write permissions
• Revocation is reflected immediately — verification returns not_revoked: error
• reason is optional but recommended for audit trail purposes
• Only the issuer of the credential can revoke it