token:revoke or token:* permission. Once revoked, the token can no longer be used for authentication.
Request parameters
The unique identifier (JTI) of the token to revoke.
Revoke a token
- TypeScript
- Python
- cURL
Error responses
| Status | Description |
|---|---|
| 403 | Missing token:revoke permission |
| 404 | Token not found |
| 400 | Token already revoked |
Revoking an already-revoked token returns a 400 error. Use the list endpoint with
include_invalid=true to check token status before revoking.