Delete an Origin SSH Certificate Authority via the API

Remove an SSH certificate authority from an owner with DELETE https://api.cursor.com/v1/origin/owners/{ownerSlug}/ssh-certificate-authorities/{certificateAuthorityId}. Official reference: Origin API (OpenAPI OriginService_DeleteSshCertificateAuthority) and changelog (added 2026-09-22).

Origin is in Early Beta and subject to change. Authenticate with a Cursor user access token that carries namespace:settings:write (installation tokens are not accepted for this write). Availability: Early Beta per the API overview.

Every certificate the authority signed stops working after delete. While the owner requires certificates, its last authority cannot be removed — that request returns FailedPrecondition (HTTP 400). Cost: 5 points against the principal budget (ordinary write).

Path parameters

Param	Required	Meaning
ownerSlug	yes	Owner slug
certificateAuthorityId	yes	id of the authority to remove (from List SSH Certificate Authorities)

curl --request DELETE \
  --url 'https://api.cursor.com/v1/origin/owners/OWNER_SLUG/ssh-certificate-authorities/CERTIFICATE_AUTHORITY_ID' \
  --header 'Authorization: Bearer YOUR_USER_TOKEN'

Response

204 No Content on success. An unknown id returns 404. If certificates are required and this would leave zero authorities, Origin rejects with FailedPrecondition (HTTP 400) and keeps the authority.

Turn off the requirement first with Set SSH Certificate Requirement (requireCertificates: false) when you need to remove the last authority. Base URL: https://api.cursor.com/v1/origin.