The appliance announces that it is giving up its credentials, and collect stops accepting them: heartbeat, inventory, backups, the alert proxy and the enterprise feed authorization all answer 401 from that moment on. Whoever kept a copy of the pair loses it along with the machine that gave it up.
The state is terminal. A system key is one-shot, so this system cannot be registered again and stays counted against the licences until it is deleted on my; a machine that needs a subscription again is given a new system with a new secret.
Only the first call answers 200. Its own revocation makes every later request from the same credentials, this one included, fail authentication.
POST
/systems/unregister
curl \
--request POST 'https://collect.your-domain.com/api/systems/unregister' \
--user "username:password"
Response examples (200)
{
"code": 200,
"message": "system unregistered",
"data": {
"system_key": "NETH-4cf3053f-d0d5-4b10-b752-ff8f7b63c2f7",
"unregistered_at": "2026-02-04T09:12:00Z"
}
}
Response examples (401)
{
"code": 401,
"message": "invalid token",
"data": {}
}
Response examples (500)
{
"code": 500,
"message": "internal server error",
"data": {}
}