Skip to main content
POST
Revoke Access Token

Overview

Invalidate an access token before it naturally expires. Use this when:
  • User logs out of your application
  • You detect suspicious activity
  • Credentials may have been compromised
  • Token is no longer needed

When to Revoke Tokens

When a user explicitly logs out, revoke their token to prevent unauthorized access.
If you suspect a token has been compromised, revoke it immediately.
When rotating API credentials, revoke existing tokens first.

Error Codes

Once a token is revoked, it cannot be used for any API requests. Any in-flight requests using the revoked token may fail.
After revoking a token, immediately clear it from your application’s storage to prevent accidental reuse.

Authorizations

Authorization
string
header
required

JWT access token obtained from /auth/token

Response

Token revoked successfully

success
boolean
Example:

true

status
integer
Example:

200

message
string
Example:

"Token revoked successfully"

data
object
meta
object