# Credential routes: update, delete

URL: /code/api/credential/records-update · Id: `page:code/api/credential/records-update`

> The Credential Verbs update, delete as api.sb routes, with inputs, result, refusals and an example.

Reference for [Credential](/business/nouns/credential), one group of [Credential routes](/code/api/credential).

### Credential.update
Changes the given properties of a Credential. [Verb page](/business/nouns/credential/update?interface=api).

```text
PATCH /{namespace}/credentials/{id}
```

Path: `id`. Body, as JSON: the other inputs. Emits `Credential.updated`.

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `id` | `string` | Yes | The id of the Credential. |
| `issuer` | `string` | No | The regulator or registry that grants it. |
| `jurisdiction` | `string` | No | Where it applies. |
| `standing` | `string` | No | Whether it is in good standing, read fresh on every use. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `credential` | [Credential](/business/nouns/credential) | Yes | The Credential. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |

**Example**

```bash
curl -X PATCH https://api.sb/leaseline.app/credentials/credential_Abb9zatRR1 \
  -H "Authorization: Bearer $STARTUP_BUILDER_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jurisdiction":"US-DE"}'
```

```json
{
  "api": "https://api.sb/leaseline.app",
  "credential": {
    "$id": "https://api.sb/leaseline.app/credentials/credential_Abb9zatRR1",
    "$type": "Credential",
    "issuer": "Example issuer",
    "jurisdiction": "US-DE"
  },
  "action": {
    "$id": "https://api.sb/leaseline.app/actions/act_br07HsG8MG",
    "operation": "Credential.update",
    "status": "done"
  },
  "links": {
    "self": "https://api.sb/leaseline.app/actions/act_br07HsG8MG"
  }
}
```

### Credential.delete
Deletes a Credential: a soft delete that keeps its history, undone by `Thing.restore`. [Verb page](/business/nouns/credential/delete?interface=api).

```text
DELETE /{namespace}/credentials/{id}
```

Path: `id`. Emits `Credential.deleted`.

**Inputs**

| Input | Type | Required | Description |
| --- | --- | --- | --- |
| `id` | `string` | Yes | The id of the Credential. |

**Returns**

| Output | Type | Required | Description |
| --- | --- | --- | --- |
| `credential` | [Credential](/business/nouns/credential) | Yes | The Credential. |

**Refuses when**

| Check | Error | Fix | Then call |
| --- | --- | --- | --- |
| The key is valid, but its scopes do not allow this operation. | [`forbidden`](/code/api/errors/forbidden) | Use a key whose scopes cover the operation, or ask an owner of the namespace to grant them. | None. |

**Example**

```bash
curl -X DELETE https://api.sb/leaseline.app/credentials/credential_Abb9zatRR1 \
  -H "Authorization: Bearer $STARTUP_BUILDER_API_KEY"
```

```json
{
  "api": "https://api.sb/leaseline.app",
  "credential": {
    "$id": "https://api.sb/leaseline.app/credentials/credential_Abb9zatRR1",
    "$type": "Credential",
    "issuer": "Example issuer",
    "jurisdiction": "US-DE"
  },
  "action": {
    "$id": "https://api.sb/leaseline.app/actions/act_br07HsG8MG",
    "operation": "Credential.delete",
    "status": "done"
  },
  "links": {
    "self": "https://api.sb/leaseline.app/actions/act_br07HsG8MG"
  }
}
```