---
title: "Revoke the calling token and its entire lineage"
method: POST
path: "/api/v1/tokens/revoke"
tags: ["tokens"]
---

# Revoke the calling token and its entire lineage

`POST /api/v1/tokens/revoke`

## Request

- Base URL: `https://devs.adaptyvbio.com`
- URL: `https://devs.adaptyvbio.com/api/v1/tokens/revoke`
- Auth: HTTP bearer

Revokes the root token used to authenticate this request and all of its
attenuated descendants, making the entire token family invalid for future
API calls.

**Idempotent**: If the token family is already revoked, returns the
original revocation timestamp and `children_revoked: 0`.

**Requires token:revoke capability.**

## Response `200`

Token family revoked successfully

- RevokeTokenResponse: Response returned when a token family is revoked.
  - `children_revoked` integer, required: Number of attenuated child tokens that were newly revoked in this call. Will be 0 on idempotent repeated calls (children already stamped).
  - `revoked_at` string, date-time, required: Timestamp when the token was revoked (may be earlier if already revoked).
  - `token_id` string, required: The root token_id that was revoked (all descendants are also revoked).

## Other responses

- `403`: Insufficient permissions - token:revoke capability required
- `404`: Token not found in database (stateless token)

---

[API](https://skmtc.dev/adaptyvbio/apis/adaptyv-foundry-api.md) - [All operations](https://skmtc.dev/adaptyvbio/apis/adaptyv-foundry-api/llms.txt) - [OpenAPI document](https://skmtc.dev/adaptyvbio/apis/adaptyv-foundry-api/revisions/5a2228f4bd59?raw)