---
title: "Revocation Snapshot"
method: GET
path: "/api/v1/revocation"
---

# Revocation Snapshot

`GET /api/v1/revocation`

## Request

- Base URL: `https://authyouragent.com` (the document declares no server; this is the origin it was published from)
- URL: `https://authyouragent.com/api/v1/revocation`
- Auth: none declared

Signed, self-contained snapshot of agent revocation state for sites
that verify Auth Your Agent tokens locally (§9.2 hot-path-off-cloud).

A site fetches this on a 60s-ish interval and caches it. On token
verification, if the token's rev_seq is present in this snapshot the
site rejects without calling the cloud. The snapshot is signed with the
same key as the access tokens (see /api/v1/jwks), so it is not forgeable.

`revoked_agents` is the union of agents with a non-ok global flag or a
tombstone, plus the sites whose grant was revoked, tagged with the
`rev_seq` they were revoked at (so an in-flight token issued before the
revocation is still honored for its TTL — the standard §10.3 bound).

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.dev/authyouragent/apis/auth-your-agent-cloud-slice.md) · [All operations](https://skmtc.dev/authyouragent/apis/auth-your-agent-cloud-slice/llms.txt) · [OpenAPI document](https://skmtc.dev/authyouragent/apis/auth-your-agent-cloud-slice/revisions/196372971a43?raw)