Disconnect account
Disconnect your own private account on an OAuth connector. Remote MCP deregistration lives on its own path.
https://api.corespeed.io/connectors/:idRemoves the caller's own unambiguous private account on an OAuth connector: the upstream grant is revoked best-effort, then the stored credential is deleted regardless of the revoke outcome.
This path no longer doubles as remote-MCP deregistration. An org-registered
remote MCP connector is deleted with DELETE /connectors/org/:slug
(admin-only, 403 admin_required otherwise) — whole-sale: the registration,
its snapshots, its stored credentials, and the KV hot copies all go, with no
undo. The split means a remote slug can never collide with a connector id on
this route again.
A tied machine is not removed here either: DELETE /connectors/device__<slug>
answers 404 endpoint_not_found. Untie it with cs untie
on the machine, or revoke it from the dashboard.
Authorizations
AuthorizationstringheaderrequiredBearer <sk-cs-…>— a CoreSpeed API key, or a user session JWT.x-api-key: <sk-cs-…>is accepted in its place.
Path parameters
idstringpathrequiredAn OAuth connector id, whose private account is removed.
Behavior
Removed, or a no-op because you own no account on this connector — this route never deletes a shared account or an account shared with you.
multiple_accountsYou own more than one account on this connector, so the target is ambiguous. Address one account directly instead.
endpoint_not_foundUnknown connector id. Unknown ids never reveal anything, credentialed or not.
Shared accounts are removed over HTTP only through
DELETE /connectors/:id/accounts/:accountId, which returns 204 and enforces
the same per-scope authorization: private → owning member only; shared →
creator or organization admin. The manage__accounts_remove MCP tool performs
the same removal addressed by alias.
Authorizing a connector is not an HTTP operation — the OAuth dance runs in the dashboard over an internal binding, so there is no public route to initiate a connect.
curl -X DELETE https://api.corespeed.io/connectors/notion \
-H "Authorization: Bearer $CORESPEED_API_KEY" \
-iNo body.
{
"error": {
"type": "invalid_request_error",
"code": "multiple_accounts",
"message": "Multiple accounts connected for notion; use manage accounts_remove with a specific alias."
}
}{
"error": {
"type": "forbidden",
"code": "admin_required",
"message": "Removing remote MCP connectors requires an org admin."
}
}