Anonymize user

POST

/api/admin/users/{id}/anonymize

Code sample: Shell / cURL

curl --request POST \
  --url https://auth.example.com/api/admin/users/example/anonymize \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "reason_code": "user_request", "confirm": true }'

Permanently deletes user PII and account linkage, revokes sessions, creates a tombstone, and returns only a hashed user ID.

Authorizations

• adminBearer
• adminSessionCookie

Parameters

Path Parameters

id

required

string

Request Body ^required

JSON request body.

Media type application/json

object

reason_code

required

string

confirm

required

boolean

key

additional properties

Example

{
  "reason_code": "user_request",
  "confirm": true
}

Responses

200

User anonymization result.

Media type application/json

object

success

required

boolean

user_id_hash

required

string

tombstone_id

string

reason_code

required

string

deleted_at

required

string format: date-time

retention_until

required

string format: date-time

message

required

string

already_anonymized

boolean

key

additional properties

Example

{
  "success": true,
  "user_id_hash": "b3f7c51f2e7c9a1f9e8c55b77f0c83462b7fb0a4c1f9e7115fbd4f6e8a0d4a91",
  "tombstone_id": "tomb_123",
  "reason_code": "gdpr_article_17",
  "deleted_at": "2026-02-18T00:00:00.000Z",
  "retention_until": "2026-05-19T00:00:00.000Z",
  "message": "User data has been permanently deleted"
}

400

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}