Delete a package version

Delete one version by its id, version, digest or a tag that points to it: it is gone from the registries at once, with its tags, and can be restored for 30 days.

DELETE/workspaces/{workspace}/packages/{package_type}/{package_name}/versions/{version_id}

Its version (or digest) cannot be published again until then. Composer versions follow their repository’s tags: delete the tag instead. Takes the Admin role on the package.

The version and its tags are gone from the registry at once. It can be restored for 30 days, and its version cannot be published again until it is purged.

Authentication: Required. Send an access token as Authorization: Bearer.
MCP tool: package with action delete_version, and the same inputs
Scope: An access token needs packages:delete.

Path parameters

Name	Type	Required	Description
`workspace`	string	Yes	The workspace’s slug, e.g. “flagon-io”.
`package_type`	string	Yes	The registry: container (also docker), npm, cargo, maven, nuget, rubygems or composer. One of `container`, `npm`, `cargo`, `maven`, `nuget`, `rubygems`, `composer`.
`package_name`	string	Yes	The package’s name without the workspace: web for g1t.sh/acme/web, web/worker for an image with more parts, group:artifact for Maven.
`version_id`	string	Yes	The version’s id (ver_…), its version, its digest, or a tag that points to it.

Example request

curl -X DELETE https://api.g1t.sh/workspaces/acme/packages/npm/ui/versions/2.0.0-beta.1 \
  -H "Authorization: Bearer $G1T_TOKEN"

Example response

A successful request answers 200 with:

{
  "deleted": true
}

Errors

A failed request answers with one of these statuses and a body like {"error": {"code": "not_found", "message": "Repository not found."}}. See errors.

Status	Code	When
401	`unauthenticated`	A token is required, or the one sent is not valid.
403	`forbidden`	The token is valid but not allowed to do this, such as a member-only change or an agent token outside its repository.
404	`not_found`	It does not exist, or you cannot see it.
409	`conflict`	The request conflicts with the current state.
422	`invalid`	The input is not valid. `message` says which field and why.