Skip to main content
POST
Delete a user's data (GDPR erasure)

Authorizations

Authorization
string
header
required

User-bound credential carrying an identity: either a session JWT or a user access token (at:*) generated from the user settings UI. Send as Authorization: Bearer <token>. Org API keys (iak_*) are not accepted here - they carry no user identity. Use the x-prismeai-api-key header instead (see OrgApiKeyAuth).

Body

application/json
user_id
string
required

Identifier of the user whose data is erased.

Maximum string length: 128
dry_run
boolean
default:false

When true, only count what would be affected; nothing is deleted.

Response

Deletion (or dry-run preview) report.

dry_run
boolean
user_id
string
conversations_anonymized
integer
agents_transferred
integer
shares_deleted
integer
ratings_deleted
integer
access_requests_deleted
integer
agent_bindings_deleted
integer
tasks_archive_deleted
integer
memories_deleted
integer
storage_files_deleted
integer
storage_vector_stores_deleted
integer
insights_deleted
integer
errors
object[]