Deactivate vault

Permanently deactivate a vault by scheduling destruction of its signing keys. The key enters a 30-day retention period before final destruction, during which the vault cannot sign transactions. This action is irreversible. Ensure all pending transactions are complete before deactivating.

Path Parameters

Parameter	Type	Required	Description
`id`	string (UUID)	Yes	Vault UUID to deactivate

Behavior

Sets vault status to inactive immediately
Schedules HSM key destruction with a 30-day retention period before final destruction
Cancels all pending signing operations for the vault
Preserves vault history, audit logs, and configuration
Cannot be reversed once initiated

Response Fields

Field	Type	Description
`id`	string	Vault identifier
`name`	string	Vault name
`type`	string	Vault type (`HSM`)
`status`	string	Updated vault status (`inactive`)
`keyStatus`	string	Key status (`pending_destruction`)
`keyError`	string	Error message if applicable (nullable)
`organizationId`	string	Owning organization
`address`	string	Blockchain address
`bsb`	string	Bank State Branch code (nullable)
`accountNumber`	string	Bank account number (nullable)
`groupName`	string	Organizational grouping (nullable)
`tags`	string[]	Metadata tags
`createdAt`	string	Creation timestamp (ISO 8601)
`updatedAt`	string	Last modification timestamp (ISO 8601)

Use Cases

Retire a vault that is no longer needed
Comply with data retention policies requiring key destruction
Decommission a compromised vault immediately

Required Permission

vaults:delete