### Revoke one card

`POST /api/v1/cards/{id}/revoke`

Flips a single card to revoked. A revoked card can never be redeemed, and the state is terminal.

- Authentication: manager session (JWT) or API token
- Permission: `prm_cards_suspend_release` (Suspend / release cards)
- Risk: write
- Rate limit bucket: `t_mutate`

#### Parameters

| Name | In | Type | Required | Description |
| --- | --- | --- | --- | --- |
| `id` | path | integer | yes | Card id. |

#### Errors

| Code | Status | When |
| --- | --- | --- |
| `ERR_NOT_FOUND` | 404 | no such card, or one outside the caller's subtree |
| `ERR_CONFLICT` | 409 | the card is already in a terminal state |