Delete an organization

Request#

DELETE /api/v1/organizations/{organization}

Requires organizations:delete. See token permissions.

Send Authorization: Bearer YOUR_API_TOKEN, Accept: application/json, Content-Type: application/json, and a required Idempotency-Key.

organization must match the token's organization ID.

Query parameters#

This endpoint does not use query parameters.

Request body#

No other body fields are supported.

Example#

curl --request DELETE "https://my.assetcenter.app/api/v1/organizations/42" \
  --header "Authorization: Bearer $ASSETCENTER_API_TOKEN" \
  --header "Accept: application/json" \
  --header "Content-Type: application/json" \
  --header "Idempotency-Key: 20bfba64-3ee0-4f11-9f35-f277e6e1e536" \
  --data '{"confirmation":"Example Organization"}'

Response#

200 OK when the token creator has another organization:

{
  "data": {
    "id": 42,
    "deleted": true,
    "token_revoked": true,
    "account_deleted": false
  }
}

account_deleted is true when this was the token creator's last organization and their user account was deleted. The response does not expose another organization's ID or provide replacement credentials. Remove the revoked token from your integration's secret storage.

Behavior and constraints#

Deletion permanently removes the organization and its data. Customer API tokens for that organization are revoked. Members with no remaining organizations also lose their user accounts and tokens. Members who have other organizations keep their accounts; app users who had the deleted organization selected are moved to a remaining organization. No customer token switches organization.

An active subscription or trial, an unended cancellation period, or another unresolved subscription state blocks deletion. Cancel the subscription or trial and wait for it to end before deleting.

An Idempotency-Key is mandatory, but successful deletion is terminal: it revokes the calling token and does not retain a replay response. A retry after deletion returns 401, including a retry with the original key. If the response is lost, invalid credentials alone do not prove deletion; verify the result in the app using any remaining account access. See idempotency and retries.

Errors#

401 means invalid, expired, or revoked authentication, including a token revoked by successful deletion. 403 means missing permission or administrator access. A different organization's ID returns 404. An incorrect name returns 422 on confirmation; a subscription or trial restriction returns 422 on organization. Unsupported input and missing or invalid keys also return 422; conflicting key reuse returns 409; throttling returns 429. See error handling and rate limits.