Admin permanently deletes a comment (irreversible)
DELETE
/reviews/{reviewId}/admin_destroy
Hard-deletes a comment and all its replies. Requires an audit comment explaining the action — the pre-destroy snapshot plus that comment become the audit record. (The web UI additionally asks the admin to type the comment ID to confirm; the API has no confirmation field.) This action cannot be undone.
Authorizations
tokenAuth
Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.
Type
HTTP (token)
Request Body
application/json
JSON "audit_comment": "Legal hard-delete — comment contained PII."
{
}
Responses
Review destroyed
application/json
JSON "review": null, "destroyed_id": 44
{
}