Skip to main content
POST
Delete hosted account data with fresh consent

Authorizations

Authorization
string
header
required

Origin-bound account token. Also send Origin and X-VM2-Wallet. First-party website proxies use the HttpOnly vm2-session cookie; arbitrary third-party origins are not supported.

Headers

Origin
enum<string>
required

Must match the approved origin in the signed consent.

Available options:
https://vibechain.com,
https://www.vibechain.com,
https://vibe.market,
https://www.vibe.market
X-VM2-Wallet
string
required

Must match the account session wallet.

Pattern: ^0x[0-9a-fA-F]{40}$

Body

application/json

Sign the exact endpoint-specific message. A syntactically valid signature alone is not authorization.

address
string
required
Pattern: ^0x[0-9a-fA-F]{40}$
nonce
string<uuid>
required

Fresh UUID v4, never reused.

expires
integer<int64>
required

Unix milliseconds; future and no more than five minutes from the server clock.

signature
string
required
Pattern: ^0x[0-9a-fA-F]{130}$
origin
enum<string>
required
Available options:
https://vibechain.com,
https://www.vibechain.com,
https://vibe.market,
https://www.vibe.market

Response

Successful response.

The response is of type object.