curl --request DELETE \
--url https://flows.super.ai/api/flows/{flow_id}/tags \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"tags": [
"Reviewed",
"reviewd"
]
}
'import requests
url = "https://flows.super.ai/api/flows/{flow_id}/tags"
payload = { "tags": ["Reviewed", "reviewd"] }
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.delete(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'DELETE',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({tags: ['Reviewed', 'reviewd']})
};
fetch('https://flows.super.ai/api/flows/{flow_id}/tags', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://flows.super.ai/api/flows/{flow_id}/tags",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "DELETE",
CURLOPT_POSTFIELDS => json_encode([
'tags' => [
'Reviewed',
'reviewd'
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://flows.super.ai/api/flows/{flow_id}/tags"
payload := strings.NewReader("{\n \"tags\": [\n \"Reviewed\",\n \"reviewd\"\n ]\n}")
req, _ := http.NewRequest("DELETE", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.delete("https://flows.super.ai/api/flows/{flow_id}/tags")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"tags\": [\n \"Reviewed\",\n \"reviewd\"\n ]\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://flows.super.ai/api/flows/{flow_id}/tags")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Delete.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"tags\": [\n \"Reviewed\",\n \"reviewd\"\n ]\n}"
response = http.request(request)
puts response.read_body{
"deleted": [
{
"executions_affected": 9,
"history_rows_purged": 4,
"tag": "reviewd",
"tag_rows_deleted": 12
}
],
"total_history_rows_purged": 4,
"total_tag_rows_deleted": 12,
"total_task_outputs_resynced": 9
}Permanently delete tags from a flow
Permanently delete tags from every execution of this flow.
Handles both single and bulk deletion — a single delete sends a one-element
tags array. All-or-nothing: the whole operation runs in one transaction, so
a failure anywhere leaves every tag in place.
Tags travel in the request body rather than the path because tag names are
free-form user text that can contain /, #, %, spaces, and emoji; a path
parameter would be corrupted by proxy and ASGI %2F normalization.
Behavior
- Matching is case-sensitive: deleting
reviewedleavesRevieweduntouched. - Active
flow_task_tagrows move tostatus='purged'withmodified_bystamped — the soft-deleted rows are the audit trail. - Rows left
status='deleted'by earlier per-execution removals are purged as well, which removes the tag fromGET /flows/{flow_id}/tag-suggestions(history_rows_purged). This includes rows on soft-deleted executions. - The denormalized
task_output.tagsarray is recomputed from the surviving active rows, which is what removes the tag from the tag dropdown and the data-tab tag filter.total_task_outputs_resyncedreports how many rows were rewritten. - Tags on soft-deleted executions are neither counted nor modified.
- Deleting a tag that matches no rows (already deleted, or a case mismatch) is
an idempotent no-op returning
200with zero counts, not a 404. - One
refresh_all_dataWebSocket event is published after commit so open data tabs re-fetch.
Permissions
Authentication plus RLS, with no role decorator — the same policies that let a caller add a tag let them delete it.
RLS blast radius
The UPDATE only reaches rows the caller can see. For org_admin / app_user
that is the whole organization, so the delete is genuinely flow-wide. For
worker / publisher the policies are invitation- and team-scoped, so the tag
is stripped only from executions inside the caller’s scope and survives
elsewhere — an org admin will still see it in the Tags tab. The response counts
report what actually changed, which makes the scoping observable.
curl --request DELETE \
--url https://flows.super.ai/api/flows/{flow_id}/tags \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"tags": [
"Reviewed",
"reviewd"
]
}
'import requests
url = "https://flows.super.ai/api/flows/{flow_id}/tags"
payload = { "tags": ["Reviewed", "reviewd"] }
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.delete(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'DELETE',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({tags: ['Reviewed', 'reviewd']})
};
fetch('https://flows.super.ai/api/flows/{flow_id}/tags', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://flows.super.ai/api/flows/{flow_id}/tags",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "DELETE",
CURLOPT_POSTFIELDS => json_encode([
'tags' => [
'Reviewed',
'reviewd'
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://flows.super.ai/api/flows/{flow_id}/tags"
payload := strings.NewReader("{\n \"tags\": [\n \"Reviewed\",\n \"reviewd\"\n ]\n}")
req, _ := http.NewRequest("DELETE", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.delete("https://flows.super.ai/api/flows/{flow_id}/tags")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"tags\": [\n \"Reviewed\",\n \"reviewd\"\n ]\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://flows.super.ai/api/flows/{flow_id}/tags")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Delete.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"tags\": [\n \"Reviewed\",\n \"reviewd\"\n ]\n}"
response = http.request(request)
puts response.read_body{
"deleted": [
{
"executions_affected": 9,
"history_rows_purged": 4,
"tag": "reviewd",
"tag_rows_deleted": 12
}
],
"total_history_rows_purged": 4,
"total_tag_rows_deleted": 12,
"total_task_outputs_resynced": 9
}Authorizations
JWT Bearer token authentication. Include your access token in the Authorization header as: Bearer YOUR_ACCESS_TOKEN
Example:
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
Path Parameters
Body
Request body for single and bulk tag deletion.
Exact tag strings to delete from this flow, matched byte-for-byte and case-sensitively. A single-tag delete sends a one-element list. Duplicates are de-duplicated server-side. Whitespace is NOT stripped: rows written before the create side started stripping may carry padding, and the Tags tab displays those as their own rows -- stripping here would redirect the delete onto the unpadded spelling and destroy a different tag flow-wide. A padded string that matches no row is an idempotent no-op, reported as zero rows deleted. Case is never folded, and no upper length bound is imposed -- flow_task_tag.tag is TEXT, so capping here would make an over-long stored tag undeletable. All-or-nothing: if any part of the operation fails, no tag is removed.
1 - 100 elements1["Reviewed", "reviewd"]
Response
Tags successfully deleted
Result of a single or bulk tag deletion.
One entry per distinct requested tag, ordered as first seen in the request.
Show child attributes
Show child attributes
Sum of history_rows_purged across all entries.
x >= 04
Sum of tag_rows_deleted across all entries.
x >= 012
Number of task_output rows whose denormalized tags array was rewritten. This is the projection the tag dropdown and the data-tab tag filter read, so a non-zero value here is what makes the deletion visible in the UI.
x >= 09