Skip to main content
DELETE
Revoke API Token

Overview

Revoke the API token currently being used for authentication. The token is identified by the X-API-Key header you send with the request. Once revoked, the token can no longer be used for authentication. This is useful for:
  • Rotating tokens for security
  • Removing compromised tokens
  • Cleaning up unused tokens

Important Notes

⚠️ Warning: Once a token is revoked, it cannot be restored. You’ll need to create a new token if needed. Best Practice: Before revoking a token, ensure no active integrations are using it, or create a replacement token first. ⚠️ Important: This endpoint revokes the token you’re currently using (the one in the X-API-Key header). You cannot revoke other tokens using this endpoint.

Token Rotation Flow

  1. Generate a new token via POST /auth/token
  2. Update your application with the new token
  3. Test the new token works
  4. Revoke the old token via this endpoint using the old token’s X-API-Key header

Authorizations

X-API-Key
string
header
required

API Key for authentication

Response

OK

message
string
Example:

"Token revoked successfully"