Permanently delete the authenticated user's account
Permanently erases the dashboard user account belonging to the caller.
This is a self-service GDPR Article 17 right-to-erasure for the
signed-in user.
Requires a fresh password re-authentication in the request body. SSO-
only accounts (no local password) cannot use this endpoint and must
contact support — those callers receive `400`.
Rate-limited per account to prevent password-guessing.
Headers
Verifa-Version
API version date string (e.g. 2026-02-01). If omitted, the version
pinned to your API key is used.
Idempotency-Key
Unique key for idempotent requests. Cached for 24 hours. Sending the
same key with different parameters returns 422.
Request
This endpoint expects an object.
password
The user’s current password (re-authentication).
confirm
Must be true — explicit acknowledgement that the deletion is irreversible.
Response
Account deleted.
deleted
Errors
400
Bad Request Error
401
Unauthorized Error
429
Too Many Requests Error