Withdraw the data processing agreement

The account withdraws its signed data processing agreement (AV-Vertrag) - with a session only.

DDestructiveNot idempotentbetaNeeds account

POST

/v1/account/gdpr/dpa/deleteon https://api.manitu.de

Try it

Removes something for good. Agents name what will be lost and wait for an explicit yes; a program should ask the same.

Not offered over MCP - only to programs over REST.

Authentication

One of X-API-Key, Authorization: Bearer … - never more than one in a request. More

Request body JSON; unknown fields are refused

No fields - send {} or no body.

Response in `data`; the rest of the body as on every call

account_idintegerrequired

The customer account - its id is also its customer number.

is_availablebooleanrequired

Whether manitu offers this account to sign a data processing agreement.

is_signedbooleanrequired

Whether the account has signed one.

signed_atstring | nullrequired

When it was signed; null: not signed.

Format date-time

Statuses

200Success.400The request does not match the declared input schema.401No credential was presented, or it was not recognised.403The credential is not permitted to use this operation.500The server failed. Nothing about the request was wrong. Whether a change took effect is not known - check before trying it again.503The channel this operation forwards through is unavailable.

POST/v1/account/gdpr/dpa/delete

Request

curl -X POST 'https://api.manitu.de/v1/account/gdpr/dpa/delete' \
  -H 'X-API-Key: $API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{}'

const response = await fetch('https://api.manitu.de/v1/account/gdpr/dpa/delete', {
  method: 'POST',
  headers: {
    'X-API-Key': process.env.API_KEY,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({}),
});
const answer = await response.json();

<?php

$curl = curl_init('https://api.manitu.de/v1/account/gdpr/dpa/delete');

curl_setopt_array($curl, [
    CURLOPT_CUSTOMREQUEST  => 'POST',
    CURLOPT_HTTPHEADER     => [
        'X-API-Key: ' . getenv('API_KEY'),
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS     => '{}',
    CURLOPT_RETURNTRANSFER => true,
]);

$answer = json_decode(curl_exec($curl), true);

import os

import requests

response = requests.request(
    "POST",
    "https://api.manitu.de/v1/account/gdpr/dpa/delete",
    headers={"X-API-Key": os.environ["API_KEY"]},
    json={},
)
answer = response.json()

Response 200

{
  "status": {
    "type": "success",
    "code": 200
  },
  "meta": {},
  "data": {
    "account_id": 12345,
    "is_available": true,
    "is_signed": true,
    "signed_at": "2026-10-23T12:00:00+02:00"
  }
}

Withdraw the data processing agreement

Authentication

Request body JSON; unknown fields are refused

Response in data; the rest of the body as on every call

Statuses

Response in `data`; the rest of the body as on every call