Skip to main content

Delete an end user (server-side admin)

DELETE 
/auth/users/:user_id

Secret-key-scoped admin soft-delete for an arbitrary end user in the authenticating application. Works in both test and live environments. Scoped to the application via the application_id filter — a caller can never delete a user belonging to another application.

Mirrors the self-service DELETE /auth/users/me flow: revokes all sessions, soft-deletes the row (status='deleted'), and emits a user.deleted webhook with method='application_admin'. The audit log row survives (no FK to end_users), so org-history queries still resolve.

Request​

Responses​

User soft-deleted