Revoke a hosted agent (ALPHA)
Alpha — early access.
Revokes an agent: it can no longer be used, and its signing key is destroyed in the isolated signer service (best-effort — the revoked state is authoritative). Idempotent.
Authorizations
Path Parameters
Response
Agent revoked
base64 P-256 SPKI
DERIVED - wallets whose attached signer groups contain the agent's signer. Empty until the customer's endorsed attaches land.
pending is DERIVED - a non-revoked agent recognized on no wallet. It cannot accept instructions until a wallet attach is endorsed.
pending, active, revoked Present on revoke: the signer groups the (now-revoked) agent's signer still belongs to. A revoked signer can't sign, but its group membership lingers — remove signer_id from each (DELETE /signer-groups/{signer_group_id}/signers/{signer_id}) to finish de-provisioning. Absent when there is nothing to clean up.

