Delete a Live
Required scopes: live.delete.
Deletes through the existing Live registry and domain authorization. Foreign or missing resources return 404. Also accepts finite personal bearer tokens for resources owned by the caller’s personal account. Personal tokens cannot operate organization Lives, use collaborators’/children’s authority, or publish presentations. Current personal token scopes and user permissions are rechecked after waits. Personal deletion requires the current strong Live If-Match; missing/stale return 428/412. Service-token deletion retains its current contract. Registered delegated OAuth access tokens are accepted within these personal boundaries; /me and account metadata additionally require identity.read.
Authentication
Organization-owned service token. Issue the initial token in organization credential settings. Scopes are documented per operation via x-required-scopes; they are not OAuth scopes.
Personal bearer credential issued through existing account settings or browser-approved CLI flow. Must be active, finite, unexpired, unrevoked, within any rotation overlap, and bound to an active personal membership/user/account. Explicit scopes intersect current user permissions; empty existing personal scopes inherit current user authority. Not an OAuth grant or service token. Browser cookies are ignored.
Registered public-client OAuth for personal-account resources only. Exact registered HTTPS or fixed-port literal loopback redirect; S256 required; explicit consent. No organization/presentation authority. identity.read is required for /me and account metadata. Scope intersection with current user authority; no empty-scope inheritance.
Path parameters
Headers
Required for personal-token deletion. Use the current strong Live ETag. Service-token deletion keeps its existing unconditional semantics.