import { createAdminClient } from '@spree/admin-sdk'

const client = createAdminClient({
  baseUrl: 'https://your-store.com',
  secretKey: 'sk_xxx',
})

// A verified certificate cannot be deleted — how a sale was taxed has to stay
// explainable — so revoking is the way out.
const certificate = await client.companies.taxExemptionCertificates.revoke(
  'comp_UkLWZg9DAJ',
  'cert_UkLWZg9DAJ',
)

spree api patch /companies/{company_id}/tax_exemption_certificates/{id}/revoke -d '{ ... }'

{
  "id": "cert_gbHJdmfrXB",
  "certificate_number": "CERT-1",
  "status": "revoked",
  "issuing_authority": null,
  "metadata": {},
  "issued_at": null,
  "expires_at": null,
  "verified_at": "2026-01-15T12:00:00.000Z",
  "created_at": "2026-01-15T12:00:00.000Z",
  "updated_at": "2026-01-15T12:00:00.000Z",
  "company_id": "comp_UkLWZg9DAJ",
  "tax_exemption_reason_id": "txr_UkLWZg9DAJ",
  "country_code": null,
  "state_code": null,
  "active": false,
  "lapsed": false,
  "can_be_deleted": true,
  "document_filename": null,
  "document_byte_size": null,
  "document_url": null
}