Redact a Memory version

Permanently removes the stored content bytes of a version while retaining its metadata for auditing. Use this operation for compliance cases, such as when sensitive information was accidentally stored and must be removed at the storage layer rather than logically deleted. This operation is irreversible. The content bytes are physically deleted and cannot be recovered. Unlike Delete a Memory, which performs logical deletion, redaction removes the content retained in a historical version.

Path

POST /api/v1/forward/memory_stores/{memory_store_id}/memory_versions/{memory_version_id}/redact

Headers

Header	Required	Description
`Authorization`	Yes	`Bearer <PAT or admin SAT>`

No request body is required. Any request body is ignored.

Path parameters

Parameter	Type	Required	Description
`memory_store_id`	string	Yes	Memory Store ID (`memstore_...`).
`memory_version_id`	string	Yes	Memory Version ID to redact (`memver_...`).

Example request

curl -X POST "https://api.qoder.com/api/v1/forward/memory_stores/memstore_00mc7mukn7lkxr454tjd/memory_versions/memver_00mc7mw0t337kbcx5q52/redact" \
  -H "Authorization: Bearer $QODER_ACCESS_TOKEN"

Example response

HTTP 200 OK

{
  "id": "memver_00mc7mw0t337kbcx5q52",
  "type": "memory_version",
  "memory_store_id": "memstore_00mc7mukn7lkxr454tjd",
  "memory_id": "mem_00mc7mvag5u68kkfvxhy",
  "path": "decisions/arch-choice.md",
  "content": null,
  "content_size_bytes": 108,
  "content_sha256": "9a4f8d2c1b7e6543210fedcba9876543210fedcba9876543210fedcba987654",
  "operation": "updated",
  "redacted": true,
  "redacted_at": "2026-08-14T12:00:00Z",
  "created_at": "2026-08-14T11:00:00Z"
}

Response

Returns the redacted Memory Version object, with content set to null, redacted set to true, and redacted_at populated.

Notes

Only the specified version is affected. Other versions of the same Memory, the current content, and metadata remain unchanged.
An archived Memory Store does not block this operation. Archive prevents creating, updating, and deleting Memories, but redaction remains available as a compliance action.
Calling the endpoint again for the same version returns 409.

Errors

HTTP	Type	Trigger
400	`invalid_request_error`	A path parameter is invalid.
401	`authentication_error`	The authentication token is missing or invalid.
403	`permission_error`	The caller cannot access the resource.
404	`not_found_error`	The Memory Store or version does not exist, or is not visible across users.
409	`conflict_error`	The version is already redacted.
500/502/503	`api_error`	Forward or a dependent service failed.

​Path

​Headers

​Path parameters

​Example request

​Example response

​Response

​Notes

​Errors