Disconnect a Drupal site and revoke its key
Authenticated with the key the site received when it connected. Revokes that key in Decionis, for the Drupal provider only, then marks the site disconnected. If the key cannot be revoked, the answer is an error and the site stays connected, so a retry is safe. Once disconnected the key no longer authenticates, and repeating the call answers 401. The organization stays: connecting the site again binds it to the same one.
Authorization
DrupalSiteKey The organization API key a Drupal site received, once, when it connected (connect/verify or connect/code). Only that key is accepted, compared with the hash stored at connect; another key of the same organization is refused.
In: header
Request Body
application/json
uuidResponse Body
application/json
application/json
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/v1/drupal/disconnect" \ -H "Content-Type: application/json" \ -d '{ "org_id": "a40f5d1f-d889-42e9-94ea-b9b33585fc6b" }'{ "disconnected": true, "org_id": "a40f5d1f-d889-42e9-94ea-b9b33585fc6b"}Read a connected Drupal site's mode POST
Authenticated with the key the site received when it connected. Every Drupal site runs in Shadow today and `entitlement` is always null: no enforcement entitlement exists for Drupal workspaces yet. An unknown organization and a wrong key get the same 401. Read-only; safe to repeat.
Inspect the selected Commerce Gate policy configuration GET
Source candidate requiring the matching backend. Requires VIEWER access and policy:read, policy:* or org:* scope for the requested organization. Unknown or duplicate query fields are rejected. Reports configuration only; HTTP 200 does not approve an action, activate policy or prove connector or release readiness. Responses are private and must not be cached.