Skip to main content
POST
Emergency Kill Switch
Activates the emergency kill switch for an agent. This is a destructive, irreversible operation that immediately:
  1. Revokes the agent — sets the agent status to revoked, preventing all future API calls
  2. Terminates all active sessions — forcibly ends every session associated with the agent
  3. Voids pending receipts — marks all unfinalized receipts as voided to prevent downstream reliance on incomplete data
The kill switch is designed for critical security incidents where an agent must be immediately neutralized — such as confirmed credential compromise, detected malicious behavior, or regulatory emergency shutdown orders.
Irreversible Operation. Agent revocation via kill switch cannot be undone. A new agent must be registered to resume operations. All voided receipts are permanently marked and cannot be restored.

Audit Trail

The kill switch activation generates a killswitch.activated event with full details, a transparency-log receipt anchoring the revocation, and notifications to all configured webhook endpoints and SIEM integrations.

Authentication

string
required
API key with agents:kill scope. This is a privileged scope typically restricted to security team keys. Alternatively, pass a Bearer JWT token with the security-admin role.
string
required
Tenant identifier for multi-tenant isolation.

Path Parameters

string
required
Agent identifier to kill (e.g. maip-agent:01HXYZ9A1B2C3D4E5F).

Request

string
required
Mandatory explanation for the kill switch activation. Recorded in the audit trail and included in all notifications.
string
Identifier of the human operator or automated system that initiated the kill. If omitted, the API key identity is used.

Response

string
The revoked agent identifier.
string
Agent status after kill switch: revoked.
integer
Number of active sessions that were forcibly terminated.
integer
Number of pending receipts that were voided.
string
The reason provided for the kill switch activation.
string
The operator who initiated the kill.
string
Transparency-log receipt anchoring the kill switch event.
string
ISO 8601 timestamp of the kill switch activation.

Authorizations

X-API-Key
string
header
required

API key for machine-to-machine authentication

Path Parameters

agentId
string<uuid>
required

Agent identifier

Body

application/json
reason
string
required

Reason for emergency kill

cascade
boolean
default:false

If true, also kill all agents this agent delegated to

Response

Agent killed

agent
object
terminated_sessions
integer

Number of sessions terminated