In the API docs the delete tracker method is listed twice:

DELETE /api/trackers/:tracker-name
DELETE /api/trackers/:tracker-name 

Looking at the actual lines, it appears that one of them should include the user because the description of the other is:

Equivalent to /api/:username/trackers/:tracker-name, implies the authenticated user.