Skip to main content
Revoke a token by its ID to immediately invalidate it. Requires token:revoke or token:* permission. Once revoked, the token can no longer be used for authentication.

Request parameters

uuid
required
The unique identifier (JTI) of the token to revoke.

Revoke a token

Error responses

Revoking an already-revoked token returns a 400 error. Use the list endpoint with include_invalid=true to check token status before revoking.