Skip to main content
POST
Revoke a token

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Headers

X-Request-Id
string

Optional client correlation id, up to 128 characters. It is not echoed: the response's X-Request-Id is always our own req_… id. We log your value with the request as client_request_id, so support can find a request by either id. A longer value is refused with 400 parameter_invalid.

Maximum string length: 128

Body

application/x-www-form-urlencoded

RFC 7009 revocation.

token
string
required

Access or refresh token.

client_id
string
required

Client the token was issued to.

Pattern: ^cli_[0-9A-HJKMNP-TV-Z]{26}$
token_type_hint
enum<string>

Hint.

Available options:
access_token,
refresh_token

Response

Revoked (or unknown).