DELETE
Delete an app

Authorizations

Origin
string
header
required

Same-origin CSRF check. The Origin header must match the request host; enforced for every mutating verb (POST, PUT, PATCH, DELETE).

X-Auditor-Admin-Token
string
header
required

Required when AUDITOR_ADMIN_TOKEN is set in the environment, and — on a network-exposed instance — on the sensitive read prefixes listed on the Overview page. Verified with crypto.timingSafeEqual. Missing or wrong token returns 401. Failed attempts are recorded in audit_log with IP + user agent.

Browser callers may send the pt_admin_token HttpOnly cookie instead; it is accepted everywhere this header is. Obtain it from POST /api/auth/admin-token/login.

Query Parameters

id
integer<int64>
required

Response

Deleted.