---
title: "Revoke"
method: POST
path: "/api/v1/app-secrets-admin/revoke"
tags: ["App Secrets Admin"]
---

# Revoke

`POST /api/v1/app-secrets-admin/revoke`

## Request

- Base URL: `https://example.conductor.one`
- URL: `https://example.conductor.one/api/v1/app-secrets-admin/revoke`
- Auth: HTTP bearer and OAuth 2
  - Client credentials
  - Token URL: `/auth/v1/token`

Revoke queues one provider-side revoke for one vended credential.

## Request body

- C1ApiAppV1AppSecretAdminServiceRevokeRequest: The AppSecretAdminServiceRevokeRequest message.
  - `ref` C1ApiAppV1AppSecretRef: The AppSecretRef message.
    - `appId` string: The appId field.
    - `appResourceTypeId` string: The appResourceTypeId field.
    - `id` string: The id field.

## Response `200`

Successful response

- C1ApiAppV1AppSecretAdminServiceRevokeResponse: The AppSecretAdminServiceRevokeResponse message.
  - `credentialRevocation` C1ApiAppV1CredentialRevocation: CredentialRevocation describes the current revoke eligibility of a credential C1 issued through credential vending.
    - `state` 'CREDENTIAL_REVOCATION_STATE_UNSPECIFIED' | 'CREDENTIAL_REVOCATION_STATE_READY' | 'CREDENTIAL_REVOCATION_STATE_REVOKING' | 'CREDENTIAL_REVOCATION_STATE_REVOKE_FAILED' | 'CREDENTIAL_REVOCATION_STATE_UNAVAILABLE' | 'CREDENTIAL_REVOCATION_STATE_REVOKED': The state field.
  - `revoked` boolean: Successful calls queue a revoke and return true.

## Changes

- **2026-10-06** `918a4e749f56`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/conductorone/apis/c1-api/changes/api/v1/app-secrets-admin/revoke/post.md)

---

[API](https://skmtc.dev/conductorone/apis/c1-api.md) - [All operations](https://skmtc.dev/conductorone/apis/c1-api/llms.txt) - [OpenAPI document](https://skmtc.dev/conductorone/apis/c1-api/revisions/fe943bedf41b?raw)