DELETE /api/zeq/llm/credentials/:id

Soft-disable. Sets active=false. The row stays in the table so audit trails are preserved (which credential was used for which agent run). Agent endpoints stop accepting the credential immediately.

To rotate: create the new credential first (so you have its ID), then delete the old.

Auth

Authorization: Bearer zeq_ak_…. Paid-tier only. Owner of the credential.

Cost

0 ZEQ. Lifecycle bookkeeping.

Request

curl -X DELETE https://YOUR-FRAMEWORK/api/zeq/llm/credentials/5b7a9c12-... \
  -H "Authorization: Bearer zeq_ak_..."

Response · 200 OK

{
  "ok": true,
  "id": "5b7a9c12-...",
  "active": false,
  "deactivated_at": "2026-05-10T13:09:01Z"
}

Errors

Status	Code	Cause
402	SUBSCRIPTION_REQUIRED	Free-tier caller.
404	not_found	Bad UUID, or credential belongs to another user.
409	already_inactive	Idempotent — no charge, returns the existing row.