Revoke a mandate with a wallet

curl --request POST \
  --url https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/revocations/wallet \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "optionId": "opt_b2c3d4e5-f6a7-8901-bcde-f23456789012",
  "signedPayloads": [
    {
      "payloadId": "payload_bf3048c1-0957-5gf8-cgf0-ddd33e046225",
      "signature": "0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab"
    }
  ],
  "reason": "Customer requested that the allowance be removed."
}
'

import requests

url = "https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/revocations/wallet"

payload = {
    "optionId": "opt_b2c3d4e5-f6a7-8901-bcde-f23456789012",
    "signedPayloads": [
        {
            "payloadId": "payload_bf3048c1-0957-5gf8-cgf0-ddd33e046225",
            "signature": "0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab"
        }
    ],
    "reason": "Customer requested that the allowance be removed."
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    optionId: 'opt_b2c3d4e5-f6a7-8901-bcde-f23456789012',
    signedPayloads: [
      {
        payloadId: 'payload_bf3048c1-0957-5gf8-cgf0-ddd33e046225',
        signature: '0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab'
      }
    ],
    reason: 'Customer requested that the allowance be removed.'
  })
};

fetch('https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/revocations/wallet', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/revocations/wallet",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'optionId' => 'opt_b2c3d4e5-f6a7-8901-bcde-f23456789012',
    'signedPayloads' => [
        [
                'payloadId' => 'payload_bf3048c1-0957-5gf8-cgf0-ddd33e046225',
                'signature' => '0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab'
        ]
    ],
    'reason' => 'Customer requested that the allowance be removed.'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/revocations/wallet"

	payload := strings.NewReader("{\n  \"optionId\": \"opt_b2c3d4e5-f6a7-8901-bcde-f23456789012\",\n  \"signedPayloads\": [\n    {\n      \"payloadId\": \"payload_bf3048c1-0957-5gf8-cgf0-ddd33e046225\",\n      \"signature\": \"0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab\"\n    }\n  ],\n  \"reason\": \"Customer requested that the allowance be removed.\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/revocations/wallet")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"optionId\": \"opt_b2c3d4e5-f6a7-8901-bcde-f23456789012\",\n  \"signedPayloads\": [\n    {\n      \"payloadId\": \"payload_bf3048c1-0957-5gf8-cgf0-ddd33e046225\",\n      \"signature\": \"0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab\"\n    }\n  ],\n  \"reason\": \"Customer requested that the allowance be removed.\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/revocations/wallet")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"optionId\": \"opt_b2c3d4e5-f6a7-8901-bcde-f23456789012\",\n  \"signedPayloads\": [\n    {\n      \"payloadId\": \"payload_bf3048c1-0957-5gf8-cgf0-ddd33e046225\",\n      \"signature\": \"0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab\"\n    }\n  ],\n  \"reason\": \"Customer requested that the allowance be removed.\"\n}"

response = http.request(request)
puts response.read_body

{
  "revocationId": "revocation_1a7f2b93-4c5d-4e6f-8a9b-0c1d2e3f4a5b",
  "mandateId": "mandate_82c879c1-84e1-44ed-a8c2-1ac239cf09ad",
  "status": "pending",
  "createdAt": "2026-08-21T14:10:00.000Z",
  "updatedAt": "2026-08-21T14:10:00.000Z"
}

Mandates

Revoke a mandate with a wallet

Customer-initiated. Removes the mandate’s spending allowance on-chain using the customer’s signed payloads from Get wallet revocation options. The customer signs the payloads themselves, so this call is unauthenticated. The mandate must have an active allowance and no approval or revocation in flight.

Returns a pending revocation and moves the mandate to revocation_pending. When the network transaction confirms, revokedAt is set and status becomes revocation_succeeded; if it does not complete, status becomes revocation_failed and a new revocation can be submitted. Follow progress with Get a mandate revocation or the acceptance.mandate.revocation_* webhooks.

A canceled mandate can still be revoked: the revocation sets revokedAt while canceledAt remains set.

POST

mandates

{mandateId}

revocations

wallet

Revoke a mandate with a wallet

curl --request POST \
  --url https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/revocations/wallet \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "optionId": "opt_b2c3d4e5-f6a7-8901-bcde-f23456789012",
  "signedPayloads": [
    {
      "payloadId": "payload_bf3048c1-0957-5gf8-cgf0-ddd33e046225",
      "signature": "0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab"
    }
  ],
  "reason": "Customer requested that the allowance be removed."
}
'

import requests

url = "https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/revocations/wallet"

payload = {
    "optionId": "opt_b2c3d4e5-f6a7-8901-bcde-f23456789012",
    "signedPayloads": [
        {
            "payloadId": "payload_bf3048c1-0957-5gf8-cgf0-ddd33e046225",
            "signature": "0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab"
        }
    ],
    "reason": "Customer requested that the allowance be removed."
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    optionId: 'opt_b2c3d4e5-f6a7-8901-bcde-f23456789012',
    signedPayloads: [
      {
        payloadId: 'payload_bf3048c1-0957-5gf8-cgf0-ddd33e046225',
        signature: '0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab'
      }
    ],
    reason: 'Customer requested that the allowance be removed.'
  })
};

fetch('https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/revocations/wallet', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/revocations/wallet",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'optionId' => 'opt_b2c3d4e5-f6a7-8901-bcde-f23456789012',
    'signedPayloads' => [
        [
                'payloadId' => 'payload_bf3048c1-0957-5gf8-cgf0-ddd33e046225',
                'signature' => '0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab'
        ]
    ],
    'reason' => 'Customer requested that the allowance be removed.'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/revocations/wallet"

	payload := strings.NewReader("{\n  \"optionId\": \"opt_b2c3d4e5-f6a7-8901-bcde-f23456789012\",\n  \"signedPayloads\": [\n    {\n      \"payloadId\": \"payload_bf3048c1-0957-5gf8-cgf0-ddd33e046225\",\n      \"signature\": \"0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab\"\n    }\n  ],\n  \"reason\": \"Customer requested that the allowance be removed.\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/revocations/wallet")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"optionId\": \"opt_b2c3d4e5-f6a7-8901-bcde-f23456789012\",\n  \"signedPayloads\": [\n    {\n      \"payloadId\": \"payload_bf3048c1-0957-5gf8-cgf0-ddd33e046225\",\n      \"signature\": \"0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab\"\n    }\n  ],\n  \"reason\": \"Customer requested that the allowance be removed.\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.cdp.coinbase.com/platform/v2/mandates/{mandateId}/revocations/wallet")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"optionId\": \"opt_b2c3d4e5-f6a7-8901-bcde-f23456789012\",\n  \"signedPayloads\": [\n    {\n      \"payloadId\": \"payload_bf3048c1-0957-5gf8-cgf0-ddd33e046225\",\n      \"signature\": \"0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab\"\n    }\n  ],\n  \"reason\": \"Customer requested that the allowance be removed.\"\n}"

response = http.request(request)
puts response.read_body

{
  "revocationId": "revocation_1a7f2b93-4c5d-4e6f-8a9b-0c1d2e3f4a5b",
  "mandateId": "mandate_82c879c1-84e1-44ed-a8c2-1ac239cf09ad",
  "status": "pending",
  "createdAt": "2026-08-21T14:10:00.000Z",
  "updatedAt": "2026-08-21T14:10:00.000Z"
}

Headers

X-Idempotency-Key

string

An optional string request header for making requests safely retryable. When included, duplicate requests with the same key will return identical responses. Refer to our Idempotency docs for more information on using idempotency keys.

Required string length: 1 - 128

Path Parameters

mandateId

string

required

The unique identifier of the mandate to revoke. The ID of the mandate, a UUID prefixed by mandate_.

Pattern: ^mandate_[a-f0-9\-]{36}$

Example:

"mandate_82c879c1-84e1-44ed-a8c2-1ac239cf09ad"

Body

application/json

A request to remove a mandate's spending allowance on-chain. Submit the optionId the customer chose from Get wallet revocation options along with their signed payloads. Returns a pending revocation that resolves once the network transaction confirms.

optionId

string

required

The identifier of the chosen option. Must match an optionId from the Get wallet revocation options response.

Example:

"opt_b2c3d4e5-f6a7-8901-bcde-f23456789012"

signedPayloads

object[]

required

The processed payloads from the customer, corresponding to the payloads in the selected option.

Show child attributes

Example:

[
  {
    "payloadId": "payload_bf3048c1-0957-5gf8-cgf0-ddd33e046225",
    "signature": "0xabcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890ab"
  }
]

reason

string

An optional human-readable reason for revoking the spending allowance.

Example:

"Customer requested that the allowance be removed."

metadata

object

Optional metadata as key-value pairs. Use this to store additional structured information on a resource, such as customer IDs, order references, or any application-specific data. Up to 10 key/value pairs may be provided. Keys and values are both strings. Keys must be ≤ 40 characters; values must be ≤ 500 characters.

Show child attributes

Example:

{
  "customer_id": "cust_12345",
  "order_reference": "order-67890"
}

Response

Successfully created mandate wallet revocation.

A record of a wallet revocation: the customer removing the mandate's spending allowance on-chain (see onchainTransactions). While it is confirming, the mandate's status is revocation_pending; on success it becomes revocation_succeeded and the mandate's revokedAt is set, and on failure it becomes revocation_failed. This applies regardless of whether the mandate was previously canceled: a revocation on an already-canceled mandate still moves status through the revocation_* values and sets revokedAt.

To check whether the spending allowance is still active, read the mandate: revokedAt is set once the allowance has been removed.

revocationId

string

required

The unique identifier of the revocation.

Pattern: ^revocation_[a-f0-9\-]{36}$

Example:

"revocation_9d2e7c14-3b8a-4f21-9c66-2a1e5d7b8f03"

mandateId

string

required

The unique identifier of the mandate this revocation applies to.

Pattern: ^mandate_[a-f0-9\-]{36}$

Example:

"mandate_82c879c1-84e1-44ed-a8c2-1ac239cf09ad"

status

enum<string>

required

The current status of the revocation attempt.

Available options:

pending,

succeeded,

failed

Example:

"succeeded"

createdAt

string<date-time>

required

The UTC ISO 8601 timestamp at which the revocation was created.

Example:

"2026-08-21T14:10:00.000Z"

updatedAt

string<date-time>

required

The UTC ISO 8601 timestamp at which the revocation was last updated.

Example:

"2026-08-21T14:12:00.000Z"

onchainTransactions

object[]

Network transactions that remove the spending allowance on-chain. Empty until the revocation has been submitted to the network.

Show child attributes

Example:

[
  {
    "transactionHash": "0xdef456789012345678901234567890abcdef1234567890abcdef1234567890ab",
    "network": "base"
  }
]

error

object

Details of why the revocation failed. Only present when status is failed.

Show child attributes

Example:

{
  "code": "transaction_reverted",
  "message": "The revocation transaction reverted on-chain.",
  "occurredAt": "2026-08-21T14:12:00.000Z"
}

metadata

object

Show child attributes

Example:

{
  "customer_id": "cust_12345",
  "order_reference": "order-67890"
}

CDP API

REST API

Revoke a mandate with a wallet

Headers

Path Parameters

Body

Response