Delete Client CA
Remove a client CA from your library. Subject to a hard "in-use" check: if any endpoint currently has this CA in its mTLS trust list, the request returns 409 Conflict with the count of dependent endpoints. Detach from those endpoints first via PUT /v1/endpoints/{id}/mtls, then retry the delete.
Once deleted: clients with leaf certs that chained to this CA are immediately rejected at the TLS handshake on any endpoint that previously trusted it. The CA's PEM bytes are removed from the database.
Path parameters
id int64 Req
CA ID. Get from /client-cas.
Response (204 No Content)
Empty body on success.
Errors
400 Bad Request
Non-numeric ID.
401 Unauthorized
Missing auth.
403 Forbidden
Caller lacks the
cert:delete permission, or the CA exists but belongs to another account.404 Not Found
CA doesn't exist.
409 Conflict
CA is still referenced by N endpoints. Body:
"Cannot delete: still referenced by N endpoint(s). Detach first." Use PUT /v1/endpoints/{id}/mtls to detach.Request
curl -X DELETE "https://api.ngris.com/v1/client-cas/7" \
-H "X-API-KEY: <your_api_key>"
Python
from ngris import Ngris
client = Ngris(api_key="<your_api_key>")
client.client_cas.delete("7")
Response — 204 No Content
Error — 409 Conflict
{
"error": "Cannot delete: still referenced by 2 endpoint(s). Detach first."
}