Deny or cancel a project access request

DELETE

/projects/{projectId}/project_access_requests/{requestId}

Admins can deny a pending access request; the requesting user can cancel their own request. If SMTP is enabled, a rejection email is sent when an admin denies. Returns JSON with toast and destroyed request ID, or HTML redirect for browser requests.

Authorizations

cookieAuth

Type

API Key (cookie: _vulcan_session)

or

tokenAuth

Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.

Type

HTTP (token)

Parameters

Path Parameters

projectId*

Numeric ID of the project.

Type

integer

Required

Example7

requestId*

Numeric ID of the access request.

Type

integer

Required

Example42

Responses

Access request destroyed successfully

Content-Type

application/json

{

  

"toast": {

  

  

"title": "Access request denied.",

  

  

"message": [

  

  

  

"Successfully denied Jane Doe's request to access project."

  

  

],

  

  

"variant": "success"

  

},

  

"id": 42

}

DELETE

/projects/{projectId}/project_access_requests/{requestId}

Playground

Authorization

cookieAuth

Variables

Key

Value

projectId*

requestId*

Samples

Powered by VitePress OpenAPI