Skip to main content

DELETE /v1/end-users/{user_id}

DELETE 

/v1/end-users/:user_id

Right to be forgotten (SPEC-14 §11.3). Hybrid model: logical deletion is immediate, physical deletion is enqueued within 24h. The cascade body field selects the granularity (default 'all'): 'all' erases layers 1 + 2.A + 2.B and anonymizes layer 3, marking the user deletion_pending; 'model_only' drops only layer 2.A; 'memory_only' drops only layer 2.B. During deletion_pending, GDPR subject-access / portability / status reads stay available while operational calls return 409 (ADR-0006); a repeated DELETE is idempotent (202).

Request

Responses

Default Response

Response Headers
    X-Request-Id

    ULID stamped on every response and propagated through error envelopes. Use it when filing support tickets — it identifies the exact request in the structured logs (requestId field).

    X-RateLimit-Limit

    Requests-per-second ceiling for the current bucket (per-organization for authenticated calls, per-IP for public ones).

    X-RateLimit-Remaining

    Tokens left in the bucket after this request.

    X-RateLimit-Reset

    ISO-8601 timestamp when the bucket will be fully refilled.