Skip to main content
POST
Create the short-lived authorization blob used by the mobile SDK to clear a device’s local pairing state and stored device token. This operation is non-destructive: it does not erase recordings and is not a factory reset.

Authentication

Requires an API key with devices:write scope. Call this endpoint from your backend, never directly from a mobile app.

Prerequisites

  • The device was bound with pk_d.
  • The app is connected over BLE and has subscribed to the current auth nonce.
  • For nonce-bound firmware, send that nonce as nonce_d.

Request Body

string
Current device auth nonce as 16 bytes encoded as 32 lowercase hexadecimal characters. Required by current nonce-bound firmware; omission exists only for legacy compatibility.

Response

Pass grant_blob to the SDK deprovision operation immediately. Only after the device confirms success should your backend call POST /devices/{id}/unbind.
For a factory reset, use POST /devices/{id}/reset and acknowledge the exact command after the physical wipe. Do not substitute deprovision plus unbind for factory reset.