---
updatedAt: 2026-06-19T01:07:00.000Z
agentTools:
  projectIndex: https://developers.akahu.nz/llms.txt
---

# Revoke access to account

> ⚠️
>
> This endpoint is deprecated.
> <pre></pre>
> Accounts connected via an official open banking connection can't be revoked on an individual basis via API. Calling this endpoint for accounts that have a `connection_type` of `official` will result in a 400 error response.
> <pre></pre>
> Use one of these alternative options to the update the accounts connected via `official` connections:
>  - Send the user to the [📚 authorisation flow](/docs/authorizing-with-oauth2) where they can reduce the scope of the authorisation via their bank.
>  - Use the [Revoke Access To Authorisation](/reference/delete_authorisations-id) endpoint to revoke the entire authorisation.

Revoke your application's access to one of the user's connected accounts and its associated data, including transactions.

Use this if you no longer require access to the consented account data.

For more details see:
  - [📚 Accessing account data guide](/docs/accessing-account-data)
  - [📖 Account model](/docs/the-account-model)

# OpenAPI definition

```json
{
  "openapi": "3.1.0",
  "info": {
    "title": "Akahu Enduring API",
    "description": "This API is the primary way for apps to interact with a user's data.",
    "version": "1.0.0"
  },
  "servers": [
    {
      "url": "https://api.akahu.io/v1"
    }
  ],
  "components": {
    "parameters": {
      "xAkahuId": {
        "name": "X-Akahu-Id",
        "in": "header",
        "required": true,
        "description": "Your **App ID Token**.",
        "schema": {
          "type": "string"
        },
        "example": "{{app_token}}"
      }
    },
    "securitySchemes": {
      "user_token": {
        "type": "http",
        "scheme": "bearer",
        "description": "User-level Authentication:\n\nHttp Bearer Auth with the token being a consented **User Access Token**.\n> `Bearer {user_token}`\n\nThis will allow you to act on a **user's** behalf when accessing the API."
      }
    },
    "responses": {
      "400": {
        "description": "Your request was malformed or otherwise unacceptable. More details are provided under the `message` key in the response.",
        "content": {
          "application/json": {
            "schema": {
              "type": "object",
              "properties": {
                "success": {
                  "type": "boolean",
                  "example": false
                },
                "message": {
                  "type": "string",
                  "example": "Invalid Content-Type"
                }
              }
            }
          }
        }
      },
      "401": {
        "description": "You are not authorised to access this content.",
        "content": {
          "application/json": {
            "schema": {
              "type": "object",
              "properties": {
                "success": {
                  "type": "boolean",
                  "example": false
                },
                "message": {
                  "type": "string",
                  "example": "Permission Denied"
                }
              }
            }
          }
        }
      },
      "403": {
        "description": "You are not allowed to access this content.",
        "content": {
          "application/json": {
            "schema": {
              "type": "object",
              "properties": {
                "success": {
                  "type": "boolean",
                  "example": false
                },
                "message": {
                  "type": "string",
                  "example": "Forbidden"
                }
              }
            }
          }
        }
      },
      "404": {
        "description": "The item you are trying to access doesn't exist.",
        "content": {
          "application/json": {
            "schema": {
              "type": "object",
              "properties": {
                "success": {
                  "type": "boolean",
                  "example": false
                },
                "message": {
                  "type": "string",
                  "example": "Not Found"
                }
              }
            }
          }
        }
      },
      "500": {
        "description": "An internal error has prevented us from processing the request. More detail may be supplied in the `message` key.",
        "content": {
          "application/json": {
            "schema": {
              "type": "object",
              "properties": {
                "success": {
                  "type": "boolean",
                  "example": false
                },
                "message": {
                  "type": "string",
                  "example": "Something went wrong"
                }
              }
            }
          }
        }
      }
    }
  },
  "tags": [
    {
      "name": "Accounts"
    }
  ],
  "paths": {
    "/accounts/{id}/verification-token": {
      "parameters": [
        {
          "name": "id",
          "in": "path",
          "required": true,
          "description": "An Akahu Account ID",
          "example": "acc_1111111111111111111111111",
          "schema": {
            "type": "string"
          }
        }
      ],
      "delete": {
        "tags": [
          "Accounts"
        ],
        "summary": "Revoke access to account",
        "deprecated": true,
        "security": [
          {
            "user_token": []
          }
        ],
        "description": "> ⚠️\n>\n> This endpoint is deprecated.\n> <pre></pre>\n> Accounts connected via an official open banking connection can't be revoked on an individual basis via API. Calling this endpoint for accounts that have a `connection_type` of `official` will result in a 400 error response.\n> <pre></pre>\n> Use one of these alternative options to the update the accounts connected via `official` connections:\n>  - Send the user to the [📚 authorisation flow](/docs/authorizing-with-oauth2) where they can reduce the scope of the authorisation via their bank.\n>  - Use the [Revoke Access To Authorisation](/reference/delete_authorisations-id) endpoint to revoke the entire authorisation.\n\nRevoke your application's access to one of the user's connected accounts and its associated data, including transactions.\n\nUse this if you no longer require access to the consented account data.\n\nFor more details see:\n  - [📚 Accessing account data guide](/docs/accessing-account-data)\n  - [📖 Account model](/docs/the-account-model)",
        "parameters": [
          {
            "$ref": "#/components/parameters/xAkahuId"
          }
        ],
        "responses": {
          "200": {
            "description": "Successful response.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "success": {
                      "type": "boolean"
                    }
                  }
                },
                "example": {
                  "success": true
                }
              }
            }
          },
          "400": {
            "$ref": "#/components/responses/400"
          },
          "401": {
            "$ref": "#/components/responses/401"
          },
          "403": {
            "$ref": "#/components/responses/403"
          },
          "404": {
            "$ref": "#/components/responses/404"
          },
          "500": {
            "$ref": "#/components/responses/500"
          }
        }
      }
    }
  }
}
```