server side of the decommission API