Skip to main content

API

/revoke

post

An endpoint used by GOV.UK Wallet credential issuers to revoke a status list index associated with a GOV.UK Wallet credential that they issued. This API will use the issuer’s /.well-known/jwks.json endpoint to locate the signing keys to verify the signature.

Responses

StatusDescriptionSchema
202

Revocation processed successfully

application/json

{
  "message": "Request processed for revocation",
  "revokedAt": 1734709493
}
RevokeResponse
400

Bad request (invalid JWT, missing fields, wrong content-type, etc.)

application/json

{
  "error": "string",
  "error_description": "string"
}
Revoke400ErrorResponse
401

Unauthorized (client not found or client mismatch)

application/json

{
  "error": "UNAUTHORIZED",
  "error_description": "Unauthorized Request"
}
Revoke401ErrorResponse
403

Forbidden (status list entry not found or issuer mismatch)

application/json

{
  "error": "FORBIDDEN",
  "error_description": "Unable to revoke the specified status list entry"
}
Revoke403ErrorResponse
404

Entry not found in status list table

application/json

{
  "error": "NOT_FOUND",
  "error_description": "Entry not found in status list table"
}
Revoke404ErrorResponse
500

Internal server error

application/json

{
  "error": "string",
  "error_description": "string"
}
Revoke500ErrorResponse
503

Service temporarily unavailable

application/json

{
  "error": "TEMPORARILY_UNAVAILABLE",
  "error_description": "Service is temporarily unavailable"
}
Revoke503ErrorResponse

Schemas

RevokeResponse

NameTypeRequiredDescriptionSchema
message string true

Status message indicating the result

revokedAt number true

Unix timestamp when the credential was revoked

Revoke400ErrorResponse

NameTypeRequiredDescriptionSchema
error string true

An error code - must be BAD_REQUEST.

error_description string false

A human-readable explanation of the error.

Revoke401ErrorResponse

NameTypeRequiredDescriptionSchema
error string true

An error code - must be UNAUTHORIZED.

error_description string false

A human-readable explanation of the error.

Revoke403ErrorResponse

NameTypeRequiredDescriptionSchema
error string true

An error code - must be FORBIDDEN.

error_description string false

A human-readable explanation of the error.

Revoke404ErrorResponse

NameTypeRequiredDescriptionSchema
error string true

An error code - must be NOT_FOUND.

error_description string false

A human-readable explanation of the error.

Revoke500ErrorResponse

NameTypeRequiredDescriptionSchema
error string true

An error code - must be INTERNAL_SERVER_ERROR.

error_description string false

A human-readable explanation of the error.

Revoke503ErrorResponse

NameTypeRequiredDescriptionSchema
error string true

An error code - must be TEMPORARILY_UNAVAILABLE.

error_description string false

A human-readable explanation of the error.

This page was last reviewed on 22 May 2026. It needs to be reviewed again on 22 November 2026 by the page owner #di-mobile-wallet-tech-docs .