# /systems/{id}/entitlements/{entitlement} - Revoke a grant

**DELETE /systems/{id}/entitlements/{entitlement}**

Revoke a grant. The revocation is soft (sets `revoked_at`; the row is
kept for audit) and idempotent. Scoped grants are addressed with the
`scope` query parameter. Only the owner organization or a Super Admin
can manage grants directly.



## Servers
- Backend API server (port 8080): https://api.your-domain.com/api (Backend API server (port 8080))
- Collect API server (port 8081): https://collect.your-domain.com/api (Collect API server (port 8081))


## Authentication methods
- Bearer auth


## Parameters

### Path parameters

- **id** (string)
  System ID

- **entitlement** (string)
  Catalog id of the granted add-on


### Query parameters

- **scope** (string)
  Application instance the grant is narrowed to (omit for system-wide grants)



## Responses
### 200
Entitlement revoked successfully

#### Body: application/json (object)
- **code** (integer)

- **message** (string)

- **data** (object)
  One add-on grant for one system, optionally narrowed to a single
  application instance via `scope` (omitted = whole system). `active` is
  derived: not revoked and not expired (`valid_until` null = perpetual).
  Revocation is soft (sets `revoked_at`, the row is kept for audit).


### 401
Unauthorized - invalid or missing token

#### Body: application/json (object)
- **code** (integer)

- **message** (string)

- **data** (object | null)


### 403
Forbidden - insufficient permissions

#### Body: application/json (object)
- **code** (integer)

- **message** (string)

- **data** (object | null)


### 404
System not found, or no grant for this (entitlement, scope)

#### Body: application/json (object)
- **code** (integer)
  HTTP error code

- **message** (string)
  Error message

- **data** (object)


### 500
Internal server error

#### Body: application/json (object)
- **code** (integer)

- **message** (string)

- **data** (object | null)



[Powered by Bump.sh](https://bump.sh)