Skip to main content

Endpoint

This is the standard OAuth 2.0 token revocation endpoint. Once revoked, a token can no longer be used to access the API.

Request Body

The request body should be sent as application/x-www-form-urlencoded.
string
required
The access token or refresh token to revoke
string
required
Your OAuth application’s client ID
string
required
Your OAuth application’s client secret

Response

Success Response (200 OK)

Returns an empty response with status 200 when the token is successfully revoked.

Example

Error Responses

401 Unauthorized

Invalid client credentials (client_id or client_secret is incorrect).

Notes

  • Revoking an access token does not automatically revoke its associated refresh token
  • You can revoke either access tokens or refresh tokens using this endpoint
  • Once revoked, the token cannot be used again and cannot be un-revoked