---
title: "Revoke an OAuth token"
method: POST
path: "/v1/oauth/revoke"
tags: ["oauth"]
---

# Revoke an OAuth token

`POST /v1/oauth/revoke`

## Request

- Base URL: `https://api.brixsignage.com`
- URL: `https://api.brixsignage.com/v1/oauth/revoke`
- Auth: none required

Revokes a refresh token or an MCP access token (RFC 7009). This ends the whole connection: every access token of that connection stops working on its next request. Always answers 200.

**Notes.**
- RFC 7009: always 200 with an empty body, whether or not the token was valid. Revoking ends the whole connection. An access token minted from an API key (client credentials) is not revoked here: revoke the API key.

## Response `200`

Success; no body.

## Other responses

- `401`: Missing, expired or revoked bearer token.
- `429`: Too many requests from one address.
- `5XX`: Server error. The body carries a `requestId` to quote to support.

---

[API](https://skmtc.dev/brixsignage/apis/brix-api.md) · [All operations](https://skmtc.dev/brixsignage/apis/brix-api/llms.txt) · [OpenAPI document](https://skmtc.dev/brixsignage/apis/brix-api/revisions/02fd3665dc7d?raw)