# Revoke a device (staff only) (/docs/api-reference/edges/EdgesController_revoke)

`POST /api/edges/{id}/revoke`

Base URL: https://api.xentr.ai

Authentication: bearer token (`Authorization: Bearer <token>`).

Marks the device as decommissioned / stolen / compromised / rotated and revokes all active OpCerts. CRL picks up the revocation within 5 min.

## Parameters

| Name | In | Required | Type | Description |
| --- | --- | --- | --- | --- |
| `id` | path | yes | string | Device serial (NOT edge UUID — the serial on the label) |

## Request body

Required.

Content type: `application/json`

```json
{
  "type": "object",
  "properties": {
    "reason": {
      "type": "string",
      "description": "Reason for revocation",
      "enum": [
        "decommissioned",
        "stolen",
        "compromised",
        "rotated"
      ]
    }
  },
  "required": [
    "reason"
  ]
}
```

## Responses

### 200