delete_creator_profile
Erase profile facts and consent history; retain a retraction marker. Admin scope.
Already committed customer hook outputs are not silently deleted. No profile data is
used for secondary learning or cross-customer retrieval today. One-way replay-key
tombstones prevent delayed keyed writes from recreating the profile. Requires the current
expected_version and confirm="delete". Errors: unauthorized, forbidden, not_found,
conflict, idempotency_conflict, invalid_request, configuration_unavailable, rate_limited.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| api_key | No | API key for this call. Omit to fall back to the Authorization: Bearer / X-API-Key request header (streamable-HTTP only), then the VHGENGINE_API_KEY env var (the stdio default). No key resolvable -> unauthorized. | |
| confirm | Yes | Must be exactly "delete" so an accidental call cannot erase it. | |
| profile_id | Yes | Account-owned creator profile id returned by create/list profiles. | |
| idempotency_key | No | Caller-chosen replay key (any string, unique per intended effect). A repeat call with the SAME key returns the stored result and is NEVER charged twice; the same key with different arguments is an idempotency_conflict. Omit and every call is a fresh, separately charged operation. | |
| expected_version | Yes | Positive immutable profile version. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| note | No | Committed-output and disabled-secondary-use boundary. | |
| deleted | No | true once direct profile data was erased. | |
| replayed | No | true when idempotency replayed the stored delete response. | |
| retained | No | Erasure, job-race, and lineage retraction receipts. | |
| profile_id | No | The erased profile id. | |
| last_version | No | Last version erased. | |
| retracted_at | No | Retraction time, ISO-8601 UTC. |