Account

Delete your account

Deletes the account’s personal information, signs out active sessions, removes organization memberships, and revokes pending invitations sent by the user. Audit history is retained.

Requires fresh credential proof: the current password (password-backed accounts) or a TOTP code (MFA-enabled accounts). At least one must be supplied; both being valid is fine but a single matching proof is enough.

Returns 409 Conflict if the user is the sole owner of an organization - ownership must be transferred first.

DELETE

users

Delete your account

curl --request DELETE \
  --url https://api.microsandbox.dev/v1/users/me \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "mfa_code": "<string>",
  "password": "<string>"
}
'

import requests

url = "https://api.microsandbox.dev/v1/users/me"

payload = {
    "mfa_code": "<string>",
    "password": "<string>"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.delete(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'DELETE',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({mfa_code: '<string>', password: '<string>'})
};

fetch('https://api.microsandbox.dev/v1/users/me', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.microsandbox.dev/v1/users/me",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "DELETE",
  CURLOPT_POSTFIELDS => json_encode([
    'mfa_code' => '<string>',
    'password' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.microsandbox.dev/v1/users/me"

	payload := strings.NewReader("{\n  \"mfa_code\": \"<string>\",\n  \"password\": \"<string>\"\n}")

	req, _ := http.NewRequest("DELETE", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.delete("https://api.microsandbox.dev/v1/users/me")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"mfa_code\": \"<string>\",\n  \"password\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.microsandbox.dev/v1/users/me")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Delete.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"mfa_code\": \"<string>\",\n  \"password\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

{
  "message": "<string>"
}

Authorizations

Authorization

string

header

required

Personal access token (msb_pat_…) or session JWT - the credential an agent acts with on a user's behalf.

Body

application/json

DELETE /v1/users/me - body confirms the destructive action.

Provide exactly one credential proof: the current password (for password-backed accounts) or a TOTP code (when MFA is enabled). OAuth-only accounts must enrol in MFA before deletion is permitted.

mfa_code

string | null

TOTP code - required when MFA is enabled.

password

string | null

Current account password - required for password-backed accounts.

Response

Account deleted

Simple message response for operations without a body.

message

string

required

⌘I

Delete your account

curl --request DELETE \
  --url https://api.microsandbox.dev/v1/users/me \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "mfa_code": "<string>",
  "password": "<string>"
}
'

import requests

url = "https://api.microsandbox.dev/v1/users/me"

payload = {
    "mfa_code": "<string>",
    "password": "<string>"
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.delete(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'DELETE',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({mfa_code: '<string>', password: '<string>'})
};

fetch('https://api.microsandbox.dev/v1/users/me', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.microsandbox.dev/v1/users/me",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "DELETE",
  CURLOPT_POSTFIELDS => json_encode([
    'mfa_code' => '<string>',
    'password' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.microsandbox.dev/v1/users/me"

	payload := strings.NewReader("{\n  \"mfa_code\": \"<string>\",\n  \"password\": \"<string>\"\n}")

	req, _ := http.NewRequest("DELETE", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.delete("https://api.microsandbox.dev/v1/users/me")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"mfa_code\": \"<string>\",\n  \"password\": \"<string>\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.microsandbox.dev/v1/users/me")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Delete.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"mfa_code\": \"<string>\",\n  \"password\": \"<string>\"\n}"

response = http.request(request)
puts response.read_body

{
  "message": "<string>"
}

Getting Started

API keys

Personal tokens

Delete your account

Authorizations

Body

Response