> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vibechain.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Delete hosted account data with fresh consent

> Destructive: do not call as a test. Requires account session plus a fresh deletionMessage signature (not a sign-in signature), origin and wallet binding. Removes hosted data and revokes sessions; blockchain records, assets and published asset metadata remain. Abuse reports expire after 90 days; moderation/deletion audit records persist indefinitely. See Authentication and consent for retention and the exact source helper. Maximum body 8192 bytes.



## OpenAPI

````yaml /api-reference/vibemarket_openapi.json post /account/delete
openapi: 3.0.3
info:
  title: vibe.market API
  version: '2026-09-10'
  description: >-
    Consumer HTTP API for the current vibe.market at
    https://vibechain.com/market. This is an experimental protocol; review
    https://vibechain.com/terms. Public reads do not require Classic API keys.
    Discover runtime graphs rather than hardcoding a revision. The
    /api/vibemarket2 namespace is intentional. Operational provider webhooks and
    operator-only controls are excluded.
  termsOfService: https://vibechain.com/terms
servers:
  - url: https://build.vibechain.com/api/vibemarket2
    description: Current-market backend
security: []
tags:
  - name: Discovery
  - name: Indexed market
  - name: Board
  - name: Live updates
  - name: Creators
  - name: Artwork
  - name: Accounts
  - name: Community
  - name: Private messages
  - name: Scoped sessions
paths:
  /account/delete:
    post:
      tags:
        - Accounts
      summary: Delete hosted account data with fresh consent
      description: >-
        Destructive: do not call as a test. Requires account session plus a
        fresh deletionMessage signature (not a sign-in signature), origin and
        wallet binding. Removes hosted data and revokes sessions; blockchain
        records, assets and published asset metadata remain. Abuse reports
        expire after 90 days; moderation/deletion audit records persist
        indefinitely. See Authentication and consent for retention and the exact
        source helper. Maximum body 8192 bytes.
      operationId: vm2042
      parameters:
        - name: Origin
          in: header
          required: true
          schema:
            type: string
            enum:
              - https://vibechain.com
              - https://www.vibechain.com
              - https://vibe.market
              - https://www.vibe.market
          description: Must match the approved origin in the signed consent.
        - name: X-VM2-Wallet
          in: header
          required: true
          schema:
            $ref: '#/components/schemas/Address'
          description: Must match the account session wallet.
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SessionEnvelope'
      responses:
        '200':
          description: Successful response.
          content:
            application/json:
              schema:
                type: object
                properties: {}
        '400':
          description: Invalid input, signature or action.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: Session missing or invalid.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: Origin, wallet or action not authorized.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '413':
          description: Body too large.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: Rate/admission limit. Honor Retry-After if present.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '503':
          description: Dependency or capacity unavailable. Retry with backoff.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
        - AccountSession: []
components:
  schemas:
    Address:
      type: string
      pattern: ^0x[0-9a-fA-F]{40}$
    SessionEnvelope:
      allOf:
        - $ref: '#/components/schemas/SignatureEnvelope'
        - type: object
          properties:
            origin:
              type: string
              enum:
                - https://vibechain.com
                - https://www.vibechain.com
                - https://vibe.market
                - https://www.vibe.market
          required:
            - origin
    Error:
      type: object
      properties:
        error:
          type: string
      required:
        - error
    SignatureEnvelope:
      type: object
      properties:
        address:
          type: string
          pattern: ^0x[0-9a-fA-F]{40}$
        nonce:
          type: string
          format: uuid
          description: Fresh UUID v4, never reused.
        expires:
          type: integer
          format: int64
          description: >-
            Unix milliseconds; future and no more than five minutes from the
            server clock.
        signature:
          type: string
          pattern: ^0x[0-9a-fA-F]{130}$
      required:
        - address
        - nonce
        - expires
        - signature
      description: >-
        Sign the exact endpoint-specific message. A syntactically valid
        signature alone is not authorization.
  securitySchemes:
    AccountSession:
      type: http
      scheme: bearer
      bearerFormat: 64-character lowercase hexadecimal token
      description: >-
        Origin-bound account token. Also send Origin and X-VM2-Wallet.
        First-party website proxies use the HttpOnly vm2-session cookie;
        arbitrary third-party origins are not supported.

````