CorebanqCorebanq Developer Docs
Itemsv1

Delete item

Deletes the item. System items cannot be deleted. A caller without the delete permission on items is refused with 403 `common.rbac_no_rec_access`. THE DELETE IS PERMANENT. models.Item embeds models.BaseModel, which carries no gorm.DeletedAt, so this issues a real DELETE FROM misc.items — the row is gone, not deactivated, and setting active=false is a different operation with a different outcome. A system item is refused with 400 items_m.system_item_cannot_be_deleted, but that protection is not durable: PUT /v1/items/{id} accepts "system": false, so a caller with update rights can clear the flag and then delete the item.

DELETE
/v1/items/{id}

Path Parameters

id*string

Item UUID

id*string

id path parameter

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X DELETE "https://example.com/v1/items/string"
Empty
{
  "status": 409,
  "message": "Item with this name already exists",
  "code": "items_m.item_name_exists",
  "class": "business",
  "retryable": false,
  "details": [
    {
      "field": "title",
      "rule": "required",
      "param": "string",
      "message": "title is required"
    }
  ]
}
{
  "status": 409,
  "message": "Item with this name already exists",
  "code": "items_m.item_name_exists",
  "class": "business",
  "retryable": false,
  "details": [
    {
      "field": "title",
      "rule": "required",
      "param": "string",
      "message": "title is required"
    }
  ]
}
{
  "status": 409,
  "message": "Item with this name already exists",
  "code": "items_m.item_name_exists",
  "class": "business",
  "retryable": false,
  "details": [
    {
      "field": "title",
      "rule": "required",
      "param": "string",
      "message": "title is required"
    }
  ]
}
{
  "status": 409,
  "message": "Item with this name already exists",
  "code": "items_m.item_name_exists",
  "class": "business",
  "retryable": false,
  "details": [
    {
      "field": "title",
      "rule": "required",
      "param": "string",
      "message": "title is required"
    }
  ]
}
{
  "status": 429,
  "message": "rate limit exceeded",
  "code": "rate_limits_m.exceeded",
  "class": "temporary",
  "retryable": true
}
{
  "status": 409,
  "message": "Item with this name already exists",
  "code": "items_m.item_name_exists",
  "class": "business",
  "retryable": false,
  "details": [
    {
      "field": "title",
      "rule": "required",
      "param": "string",
      "message": "title is required"
    }
  ]
}

{
  "overall_status": "unhealthy",
  "message": "Service is shutting down",
  "timestamp": "2026-08-27T15:04:05Z"
}

PUTUpdate item

Updates the fields present in the body; absent fields are left alone. A caller without the update permission on items is refused with 403 `common.rbac_no_rec_access`. system is writable here. Sending "system": false on an item that had it set clears the delete protection described on DELETE /v1/items/{id}; the field is only skipped when the key is absent from the body.

POSTCreate new set item

Attaches an item to a record of another type. The permission checked is READ on record_type/record_id — the record the item is being attached to, not the item. A caller without READ on that record is refused with 403 `common.rbac_no_rec_access`. Accept-Language is not read on this route: only GetItem and ListItems pull constants.AcceptLanguage from the request, and this 201 body carries no localised fields.