Create Emergency Revoke.

POST

/api/admin/machine-access/principals/{id}/credentials/{credentialId}/emergency-revoke

Code sample: Shell / cURL

curl --request POST \
  --url https://auth.example.com/api/admin/machine-access/principals/example/credentials/example/emergency-revoke \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "reason": "maintenance" }'

Create Emergency Revoke in the Machine Access area. The request body is JSON unless the detailed schema for this operation states otherwise.

Authorizations

• adminBearer
• adminSessionCookie

Parameters

Path Parameters

id

required

string

credentialId

required

string

Request Body

Optional reason for disabling, enabling, or revoking.

Media type application/json

object

reason

string

Example

{
  "reason": "maintenance"
}

Responses

200

Machine credential.

Media type application/json

object

credential

required

object

id

string

principalId

string

kid

string

publicJwkJson

string

alg

string

Allowed values: ES256 PS256 RS256

displayName

string

description

Any of:

string

string

null

null

status

string

Allowed values: active rotating revoked expired

notBefore

Any of:

integer

integer format: int64

null

null

expiresAt

Any of:

integer

integer format: int64

null

null

createdAt

integer format: int64

updatedAt

integer format: int64

Example

{
  "credential": {
    "id": "amk_123",
    "principalId": "amp_123",
    "kid": "kid-2026-01",
    "alg": "ES256",
    "displayName": "Production signing key",
    "description": "Primary automation credential.",
    "status": "active",
    "notBefore": null,
    "expiresAt": 1800000000000,
    "createdAt": 1770000000000,
    "updatedAt": 1770000000000
  }
}

default

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}