# DELETE /api/v2/checkins/{checkin}

Delete a checkin

- MCP id: checkins.destroy
- Scope: api:destroy:checkins
- Permission: none, the record's own rules still apply
- Rate cost: 1 unit, write bucket.
- Cache-Control: private, no-store

Permanently deletes a checkin.

This resource is hard-delete: there is no restore action, no `force` parameter and no `trashed` parameter. Nothing blocks the delete: a checkin carries no dependants, and removing one simply takes the period out of the attendance report. This operation declares no permission of its own, but it still requires `checkins::read`; a caller without it gets `404` on every checkin.

## Parameters
- checkin (integer, path): The Checkin's numeric id.
- X-Request-Id (header, optional): A correlation id of your own. It is recorded in our logs next to the server's request id but never returned: the response header always carries the server's id. A value that does not match the pattern is discarded silently, never rejected.
- If-Match (header, optional): The ETag a write is conditional on. A stale validator is 412 precondition-failed.

## Response 204

## Errors
- 403 forbidden-by-policy | insufficient-permission | insufficient-token-scope: Forbidden.
- 412 precondition-failed: Precondition failed.
- 400 idempotency-key-required | invalid-cursor | invalid-query-parameter | malformed-request | unsupported-parameter: Bad request.
- 401 token-expired | unauthenticated: Unauthenticated.
- 404 endpoint-not-found | resource-not-found: Not found.
- 406 not-acceptable: Not acceptable.
- 429 rate-limit-exceeded: Too many requests.
- 500 internal-error: Server error.
- 503 tenant-unavailable: Service unavailable.

## Example
```bash
curl -X DELETE \
  'https://<your-url>/api/v2/checkins/1' \
  -H 'Authorization: Bearer <token>' \
  -H 'Accept: application/json'
```