curl --request POST \
--url https://api.sandbox.nevermined.app/api/v1/organizations/{orgId}/customers/{customerId}/block \
--header 'Authorization: Bearer <token>'import requests
url = "https://api.sandbox.nevermined.app/api/v1/organizations/{orgId}/customers/{customerId}/block"
headers = {"Authorization": "Bearer <token>"}
response = requests.post(url, headers=headers)
print(response.text)const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.sandbox.nevermined.app/api/v1/organizations/{orgId}/customers/{customerId}/block', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.sandbox.nevermined.app/api/v1/organizations/{orgId}/customers/{customerId}/block",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.sandbox.nevermined.app/api/v1/organizations/{orgId}/customers/{customerId}/block"
req, _ := http.NewRequest("POST", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.sandbox.nevermined.app/api/v1/organizations/{orgId}/customers/{customerId}/block")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.sandbox.nevermined.app/api/v1/organizations/{orgId}/customers/{customerId}/block")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"id": "oc-7b1c3e9a",
"orgId": "org-abc123",
"userId": "us-2f4a6c8e",
"firstSeenAt": "2026-01-15T09:30:00.000Z",
"lastActiveAt": "2026-05-20T14:05:00.000Z",
"totalSpent": "125000000",
"createdAt": "2026-01-15T09:30:00.000Z",
"status": "active",
"userName": "Aitor Argomaniz",
"userEmail": "aitor@example.com"
}Block an organization customer
Blocks a customer: revokes the API keys this organization issued to them via white-label onboarding, and refuses to re-issue those until they are unblocked. Their own personal keys, and keys issued by other organizations, are untouched. Note: short-lived credentials minted through the embedded widget/iframe session flow are not org-scoped, so a block neither revokes an outstanding one nor prevents a new one (tracked separately). Idempotent — blocking an already-blocked customer succeeds without re-revoking or re-emitting the activity event. Requires a Nevermined API key, organization admin privileges, and the Enterprise tier.
curl --request POST \
--url https://api.sandbox.nevermined.app/api/v1/organizations/{orgId}/customers/{customerId}/block \
--header 'Authorization: Bearer <token>'import requests
url = "https://api.sandbox.nevermined.app/api/v1/organizations/{orgId}/customers/{customerId}/block"
headers = {"Authorization": "Bearer <token>"}
response = requests.post(url, headers=headers)
print(response.text)const options = {method: 'POST', headers: {Authorization: 'Bearer <token>'}};
fetch('https://api.sandbox.nevermined.app/api/v1/organizations/{orgId}/customers/{customerId}/block', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.sandbox.nevermined.app/api/v1/organizations/{orgId}/customers/{customerId}/block",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.sandbox.nevermined.app/api/v1/organizations/{orgId}/customers/{customerId}/block"
req, _ := http.NewRequest("POST", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.sandbox.nevermined.app/api/v1/organizations/{orgId}/customers/{customerId}/block")
.header("Authorization", "Bearer <token>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.sandbox.nevermined.app/api/v1/organizations/{orgId}/customers/{customerId}/block")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
response = http.request(request)
puts response.read_body{
"id": "oc-7b1c3e9a",
"orgId": "org-abc123",
"userId": "us-2f4a6c8e",
"firstSeenAt": "2026-01-15T09:30:00.000Z",
"lastActiveAt": "2026-05-20T14:05:00.000Z",
"totalSpent": "125000000",
"createdAt": "2026-01-15T09:30:00.000Z",
"status": "active",
"userName": "Aitor Argomaniz",
"userEmail": "aitor@example.com"
}Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Path Parameters
Organization ID
"org-abc123"
Customer record ID
"oc-7b1c3e9a"
Response
Customer blocked
Customer record ID.
"oc-7b1c3e9a"
Organization the customer belongs to.
"org-abc123"
Nevermined user ID of the customer.
"us-2f4a6c8e"
ISO-8601 timestamp the customer was first observed.
"2026-01-15T09:30:00.000Z"
ISO-8601 timestamp of the customer’s most recent activity.
"2026-05-20T14:05:00.000Z"
Total amount the customer has spent, serialised as a string (bigint).
"125000000"
ISO-8601 timestamp the customer record was created.
"2026-01-15T09:30:00.000Z"
Lifecycle status. blocked customers hold no valid org-issued credential and cannot be issued a new one until unblocked.
active, blocked "active"
Display name from the buyer’s user profile, when available.
"Aitor Argomaniz"
Email from the buyer’s user profile, when available.
"aitor@example.com"
Was this page helpful?