revoke_proof
Revoke a proof by its public handle (ph_ctl_* / ph_dlg_*) or a verification ID — the same addresses get_proof_status takes. The proof token will no longer validate anywhere: the status endpoint, the public validator, the revocation list and the Token Status List all report it revoked. A domain CONTROL proof (a ph_ctl_* of a domain) also revokes, for good, every delegation issued from it; for a domain you own, every proof of the domain is revoked and the domain needs re-verification. The API key needs proofs:write, plus delegations:write while the revocation reaches live delegations — for a domain you own, any live delegation of the domain, whichever of its handles you name (the refusal names the scope and the count). A handle revoked before the domain was verified again does not reach the new proof: revoke that one by its own handle. Otherwise it revokes the PROOF only — the asset or consent it is about stays. Need a temporary stop? Use suspend_proof instead. Cannot be undone.
ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"id": "<id>"
},
"name": "revoke_proof"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | Public proof handle (ph_ctl_* / ph_dlg_*) or verification ID | |
| reason | No | Why the proof is revoked, one of: user_request, fraud, key_compromise, asset_transferred, other. A delegation proof (ph_dlg_*) refuses asset_transferred. The API refuses any other value. Defaults to user_request. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| reason | No | ||
| success | No | ||
| proof_id | No | Public proof handle (`ph_ctl_*`/`ph_dlg_*`). Present when the proof was addressed by handle. | |
| principal | No | Control proofs only: the domain the proof is about. | |
| proof_type | No | Which record carries the revoked proof (`verification`, `user_asset`, `verification_request`, `delegation`, …). Present when the proof was addressed by handle. | |
| revoked_at | No | ||
| owned_domain | No | Control proofs only: true when the account OWNS the domain (a Domain row or a domain asset for the name) and the whole-domain cascade ran — every proof of the domain and every delegation issued from it revoked, the domain demoted to `reverification_required`. False for a bare verification of somebody else's domain: that proof and the delegations anchored on it only. | |
| domain_status | No | Control proofs only: the Domain row's status after the act (`reverification_required` after the cascade); null when the account has no Domain row for the name. | |
| verification_id | No | Present only when the revoked proof belongs to a verification. | |
| delegations_revoked | No | Control proofs only: the delegations revoked with the proof. Re-verifying the domain does not bring them back. |