platform.credential.revoke

Revoke a credential. Effective immediately (no token cache in M0).

• Scope: platform.iam.write
• System: yes
• Reachable from: no request — the CONTROL face does not mount this command. It kills a credential mid-flight, and the platform reaches it from apps/control-plane in-process (deprovision, rotation). It is the twin of the issue above: the face that must not mint must not unmint either, or the same wire caller decides who may talk to the box.
• Events: platform.credential.revoked

Input (JSON Schema)

{
  "properties": {
    "credential_id": {
      "minLength": 1,
      "type": "string"
    }
  },
  "required": [
    "credential_id"
  ],
  "type": "object"
}

Result (200)

Open (unknown) — this command does not declare an output schema.

Errors

validation_failed (400) · unauthorized (401) · forbidden (403) · conflict (409) · internal (500)