revoke_authorization
Destructive
Revoke an active or pending authorization. Only authorizations with status "active" or "pending" can be revoked.
ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"id": "<id>"
},
"name": "revoke_authorization"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | Authorization ID to revoke | |
| reason | No | Reason for revocation |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | MongoDB ObjectId | |
| bsuid | No | WhatsApp Business-Scoped User ID | |
| label | No | Owner-assigned human label for this approver (F22); null when unset. Surfaces lead with it, falling back to the masked recipient. | |
| phone | No | ||
| scope | Yes | Scope of the authorization. `identity_challenge` is the Proof of Me scope. | |
| status | Yes | Status of an authorization | |
| channel | Yes | Channel authorized for sending confirmations | |
| hitl_id | No | ||
| enrolled | Yes | Whether the approver has enrolled an encryption key. A confirmation can be sealed to an approver only once this is true; consent alone (`status: active`) is not enough. | |
| circle_id | No | ||
| denied_at | No | When the recipient refused — the mirror of `authorized_at` for a `denied` row (a challenger cancellation stamps it too). Absent unless the authorization was denied; before it existed such a row carried no decision time at all, only `updated_at`. | |
| recipient | No | Channel-specific recipient identifier (chat_id for Telegram, phone or BSUID for WhatsApp) | |
| created_at | Yes | ||
| expires_at | Yes | ||
| revoked_at | No | ||
| updated_at | Yes | ||
| proof_token | No | Signed proof of the recipient's decision, minted when they approved or refused, for both scopes. Absent while no decision has been made. | |
| last_used_at | No | ||
| authorized_at | No | ||
| business_name | Yes | ||
| verification_id | No | MongoDB ObjectId | |
| revocation_reason | No | ||
| confirmations_sent | Yes | ||
| recipient_display_name | Yes | The approver's own messenger name ("First Last @username"), captured when they approved over Telegram; null when none was captured. Chosen by the approver, not verified. |