# Delete a document

> Deletes a document and its file, as the Documents tab's Delete does.

`DELETE /v1/documents/{documentId}`

Deletes a document and its file, as the Documents tab's Delete does. It cannot be undone, so `confirm` (a query parameter) must be the document's exact name. To hide a document from travelers without deleting it, PATCH it to `visibility: staff`.

**Permissions:** `documents:write` · **Kind:** destructive · **Cost:** 1 unit · MCP tool [`delete_document`](https://api.bymundi.com/docs/mcp/tools/delete_document.md)

Cannot be undone.

## Path parameters

| Field | Type | Required | Description |
|---|---|---|---|
| `documentId` | uuid | yes |  |

## Query parameters

| Field | Type | Required | Description |
|---|---|---|---|
| `confirm` | string | yes | The document's exact name. max 200 chars |

## Response `200`

| Field | Type | Required | Description |
|---|---|---|---|
| `object` | "document" | yes |  |
| `id` | uuid | yes |  |
| `deleted` | true | yes |  |

## Errors

Errors are [problem details](https://api.bymundi.com/docs/guides/errors.md). Besides the refusals described above, any call like this one can return:

- [`invalid_request`](https://api.bymundi.com/problems/invalid_request.md) — Invalid request
- [`unauthorized`](https://api.bymundi.com/problems/unauthorized.md) — Missing or invalid API key
- [`insufficient_scope`](https://api.bymundi.com/problems/insufficient_scope.md) — Missing permission
- [`rate_limited`](https://api.bymundi.com/problems/rate_limited.md) — Rate limit reached
- [`not_found`](https://api.bymundi.com/problems/not_found.md) — Not found
- [`idempotency_key_reused`](https://api.bymundi.com/problems/idempotency_key_reused.md) — Idempotency-Key reused
- [`request_in_progress`](https://api.bymundi.com/problems/request_in_progress.md) — Request in progress
- [`forbidden`](https://api.bymundi.com/problems/forbidden.md) — Not allowed

## Examples

#### curl

```bash
curl -X DELETE https://api.bymundi.com/v1/documents/$DOCUMENT_ID \
  -H "Authorization: Bearer $BYMUNDI_KEY" \
  -H "Idempotency-Key: $(uuidgen)"
```

#### JavaScript

```javascript
const res = await fetch(`https://api.bymundi.com/v1/documents/${documentId}`, {
  method: "DELETE",
  headers: {
    Authorization: `Bearer ${process.env.BYMUNDI_KEY}`,
    "Idempotency-Key": crypto.randomUUID(),
  },
});
if (!res.ok) throw new Error((await res.json()).detail);
const data = await res.json();
```

#### Python

```python
import os, uuid, requests

res = requests.delete(
    f"https://api.bymundi.com/v1/documents/{documentId}",
    headers={"Authorization": f"Bearer {os.environ['BYMUNDI_KEY']}", "Idempotency-Key": str(uuid.uuid4())},
)
res.raise_for_status()
data = res.json()
```