Delete one of the visitor's own conversations
Permanently delete a conversation and its stored transcript. Answers 404 (never 403) for a conversation the caller does not own. Every response carries `X-History-Identity-Status` (`not_provided` | `admitted` | `ignored`) reporting what the server did with a supplied `X-Identity-Proof`, so a widget can tell a verified action from a browser-scoped one. It is exposed via CORS; it grants no authority.
Path parameters
id
Conversation id from the list route.
Headers
x-visitor-token
The browser’s anonymous visitor secret (cvt_…) returned by /client/init. It is what scopes the request to one visitor’s own conversations, so a request without it is refused. Sent as a header so it never lands in access logs or Referer.
x-identity-proof
Optional fresh hosted end-user identity proof. When admitted and already bound to the presented visitor, expands the request from this exact browser to sibling visitors for the same verified person. Without it, even a previously bound visitor remains exact-browser scoped.
Query parameters
sessionId
Client session id from /client/init.
Response
Deleted. deleted is always 1 on this route.
deleted
Number of conversations deleted. The delete-all route returns 0 when the visitor has no history, rather than an error.
Errors
400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error
404
Not Found Error
429
Too Many Requests Error
500
Internal Server Error
503
Service Unavailable Error