Emergency Kill Switch
Machine Agents
Kill Switch
Emergency kill switch: immediately revoke an agent, terminate all sessions, and void pending receipts.
POST
Emergency Kill Switch
Activates the emergency kill switch for an agent. This is a destructive, irreversible operation that immediately:
- Revokes the agent — sets the agent status to
revoked, preventing all future API calls - Terminates all active sessions — forcibly ends every session associated with the agent
- Voids pending receipts — marks all unfinalized receipts as voided to prevent downstream reliance on incomplete data
Audit Trail
The kill switch activation generates akillswitch.activated event with full details, a transparency-log receipt anchoring the revocation, and notifications to all configured webhook endpoints and SIEM integrations.
Authentication
string
required
API key with
agents:kill scope. This is a privileged scope typically
restricted to security team keys. Alternatively, pass a Bearer JWT token with
the security-admin role.string
required
Tenant identifier for multi-tenant isolation.
Path Parameters
string
required
Agent identifier to kill (e.g.
maip-agent:01HXYZ9A1B2C3D4E5F).Request
string
required
Mandatory explanation for the kill switch activation. Recorded in the audit
trail and included in all notifications.
string
Identifier of the human operator or automated system that initiated the kill.
If omitted, the API key identity is used.
Response
string
The revoked agent identifier.
string
Agent status after kill switch:
revoked.integer
Number of active sessions that were forcibly terminated.
integer
Number of pending receipts that were voided.
string
The reason provided for the kill switch activation.
string
The operator who initiated the kill.
string
Transparency-log receipt anchoring the kill switch event.
string
ISO 8601 timestamp of the kill switch activation.
Authorizations
API key for machine-to-machine authentication
Path Parameters
Agent identifier
Body
application/json

