This should at least be a `POST`. A GET should never do anything other than retrieval. See [HTTP, sec 9.1.1 (safe methods)](http://www.w3.org/Protocols/rfc2616/rfc2616-sec9.html#sec9.1.1). Suppose that an email client pre-emptively fetches links. The meetup will self-destruct. In addition, the endpoint in its current form will let anyone delete any PendingJob ever.

Can you also add additional checking? Ideally only the user who created the meetup (or an admin) should be able to stop the recurrence.

Is there a page somewhere that lists a user's upcoming meetups? That would be a good place to put a "cancel recurring meetup" button, and the "your meetup is about to be reposted" email can just link to that page.