Remove Cards

Introduction

This page covers the independent lifecycle operations for the cards flow. Pick the section that matches what you need to do — each operation is self-contained.

If you need to…	See
Stop a saved card from being used for any future agent cards	Remove a saved card
Cut off an agent’s ability to create new agent cards	Delete an agent
Immediately invalidate a single active agent card	Revoke an agent card
Replace an agent card whose credentials may be compromised	Rotate an agent card

Prerequisites

An authenticated user with a valid JWT.
The ID of the resource you want to modify (paymentMethodId for a card, agentId for an agent).

Remove a Saved Card

Send a DELETE request with the paymentMethodId. The card can no longer be used to create new agent cards.

const BASE_URL = "https://staging.crossmint.com/api/unstable";

async function removePaymentMethod(jwt: string, paymentMethodId: string) {
    const response = await fetch(
        `${BASE_URL}/payment-methods/${paymentMethodId}`,
        {
            method: "DELETE",
            headers: {
                "Content-Type": "application/json",
                "X-API-KEY": CROSSMINT_CLIENT_API_KEY,
                Authorization: `Bearer ${jwt}`,
            },
        }
    );

    if (!response.ok) {
        throw new Error(`Failed to remove payment method (${response.status})`);
    }
}

Removing a saved card does not cancel agent cards already created against it. Active order intents keep working until their internal expiration is reached. To cut off an in-flight order intent immediately, revoke it or delete the agent.

Delete an Agent

Send a DELETE request with the agentId. The agent loses the ability to create new agent cards, and any active order intents tied to it stop working.

const BASE_URL = "https://staging.crossmint.com/api/unstable";

async function deleteAgent(jwt: string, agentId: string) {
    const response = await fetch(
        `${BASE_URL}/agents/${agentId}`,
        {
            method: "DELETE",
            headers: {
                "Content-Type": "application/json",
                "X-API-KEY": CROSSMINT_CLIENT_API_KEY,
                Authorization: `Bearer ${jwt}`,
            },
        }
    );

    if (!response.ok) {
        throw new Error(`Failed to delete agent (${response.status})`);
    }
}

Deletion is permanent. To restore the agent’s ability to spend, register a new agent by following Register an Agent.

Revoke an Agent Card

To immediately invalidate a single agent card — for example if its credentials may have been compromised — send a DELETE request with the orderIntentId. The order intent transitions to the revoked phase and its credentials can no longer be used for purchases. Only order intents currently in the active or requires-verification phase can be revoked. Already-expired or already-revoked order intents return an error.

const BASE_URL = "https://staging.crossmint.com/api/unstable";

async function revokeOrderIntent(jwt: string, orderIntentId: string) {
    const response = await fetch(
        `${BASE_URL}/order-intents/${orderIntentId}`,
        {
            method: "DELETE",
            headers: {
                "Content-Type": "application/json",
                "X-API-KEY": CROSSMINT_CLIENT_API_KEY,
                Authorization: `Bearer ${jwt}`,
            },
        }
    );

    if (!response.ok) {
        throw new Error(`Failed to revoke order intent (${response.status})`);
    }
}

A successful revoke returns 204 No Content. The underlying saved card and agent are untouched — only the targeted order intent is affected. To replace it with a new agent card, see Rotate an agent card. For the full schema, see the Revoke Agent Card API Reference.

Rotate an Agent Card

To rotate an agent card — for example if its credentials may have been compromised — revoke the old order intent and create a replacement:

Revoke the old order intent so its credentials can no longer be used.
Create a new order intent against the same saved card with the same (or updated) spending rules. See Create an Agent Card.
Have the user authorize the new intent via passkey.
Use the new credentials in your checkout flow.

await revokeOrderIntent(jwt, oldOrderIntentId);

// Create a replacement agent card against the same payment method
const newOrderIntent = await createOrderIntent(jwt, agentId, paymentMethodId, mandates);

// If requires-verification, prompt the user for passkey authorization,
// then fetch credentials for the new card
const newCredentials = await fetchCardCredentials(jwt, newOrderIntent.orderIntentId, merchant);

To cut off an agent’s access to all of its agent cards immediately, delete the agent instead. For the full list of order intent phases — including revoked and expired — see the Get Order Intent API Reference.

Agents

Quickstarts ⚡

Payment Methods

Payment Flows

API Reference

Introduction

Prerequisites

Remove a Saved Card

Delete an Agent

Revoke an Agent Card

Rotate an Agent Card

Next Steps

Create an Agent Card

Register an Agent

​Introduction

​Prerequisites

​Remove a Saved Card

​Delete an Agent

​Revoke an Agent Card

​Rotate an Agent Card

​Next Steps

Create an Agent Card

Register an Agent

Introduction

Prerequisites

Remove a Saved Card

Delete an Agent

Revoke an Agent Card

Rotate an Agent Card

Next Steps