---
title: "Revoke an unfinished card request"
description: "Prevents new authorization or capture. A genuinely completed provider save is still reconciled as success."
---

`POST /v1/developer/guest/wallet/requests/{requestId}/revoke`

**Operation ID:** `revokeDeveloperWalletRequest`

Prevents new authorization or capture. A genuinely completed provider save is still reconciled as success.

## Contract status

| Field | Value |
| --- | --- |
| Maturity | `preview` |
| Required capability | `guest_wallet_requests.write` |
| Freshness class | `authenticated-state` |
| Quota cost | `1` |

All operations require a Kismet Developer Bearer credential. Collection and resource authority is resolved from the credential's installation grants; identifiers in the URL never grant access.

## Request parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `requestId` | path | string | yes |  |

## Request body

The request body is JSON. The canonical schema is:

```json
{
  "type": "object",
  "additionalProperties": false,
  "properties": {}
}
```

Minimal example:

```json
{}
```

## cURL

Set `KISMET_API_ORIGIN=https://api.ksmt.app` and configure `KISMET_DEVELOPER_API_KEY` in your environment. Run server-credential requests from your backend, not browser code.

```sh
curl --request POST \
  "$KISMET_API_ORIGIN/v1/developer/guest/wallet/requests/{requestId}/revoke" \
  --header "Authorization: Bearer $KISMET_DEVELOPER_API_KEY" \
  --header "Accept: application/json" \
  --header "Content-Type: application/json" \
  --data '{}'
```

## Responses

| Status | Meaning |
| --- | --- |
| 200 | Success. |
| 400 | Invalid request parameters or body. |
| 401 | Missing, invalid, expired, or inappropriate credential/session. |
| 403 | Credential lacks the required grant/capability, or an origin/CSRF check failed. |
| 404 | The authorized resource was not found. |
| 409 | Request conflicts with the installation environment or current state. |
| 410 | The single-use authentication challenge is no longer valid. |
| 429 | Rate limit or quota exceeded; inspect response metadata before retrying. |
| 503 | A required Kismet dependency is temporarily unavailable. |

### 200 response schema

Content type: `application/json`. Required fields, nullable values, and nested structures are defined below.

<details>
<summary>View complete response schema</summary>

```json
{
  "type": "object",
  "additionalProperties": false,
  "required": [
    "id",
    "status",
    "delivery",
    "deliveryState",
    "reference",
    "createdAt",
    "expiresAt",
    "livemode",
    "startUrl"
  ],
  "properties": {
    "id": {
      "type": "string",
      "format": "uuid"
    },
    "status": {
      "type": "string",
      "enum": [
        "pending",
        "in_progress",
        "succeeded",
        "expired",
        "revoked"
      ]
    },
    "delivery": {
      "type": "string",
      "enum": [
        "partner_link",
        "kismet_email"
      ]
    },
    "deliveryState": {
      "type": "string",
      "enum": [
        "not_requested",
        "pending",
        "sent",
        "failed"
      ]
    },
    "reference": {
      "type": [
        "null",
        "string"
      ]
    },
    "createdAt": {
      "type": "string",
      "format": "date-time"
    },
    "expiresAt": {
      "type": "string",
      "format": "date-time"
    },
    "livemode": {
      "type": "boolean"
    },
    "startUrl": {
      "type": [
        "null",
        "string"
      ],
      "description": "Partner navigation context only. Never authenticates a guest. Null for Kismet-delivered email and closed requests."
    }
  }
}
```

</details>

## Machine-readable sources

- [This page as Markdown](/api/reference/revoke-developer-wallet-request.md)
- [Developer API OpenAPI v0.7.50](/openapi.json)