---
title: "Revoke one connected app. Deletes every oauth token and every unused authorization code for this account and client in one transaction. The client registration stays. Those access tokens then return 401, and their refresh tokens fail at /oauth/token. Other clients and API keys stay valid. Requires key_write. An inbox-scoped key is 403 permission_denied. Nothing to revoke is 404 oauth_grant_not_found."
method: DELETE
path: "/api/v1/oauth/grants/{client_id}"
tags: ["Auth"]
---

# Revoke one connected app. Deletes every oauth token and every unused authorization code for this account and client in one transaction. The client registration stays. Those access tokens then return 401, and their refresh tokens fail at /oauth/token. Other clients and API keys stay valid. Requires key_write. An inbox-scoped key is 403 permission_denied. Nothing to revoke is 404 oauth_grant_not_found.

`DELETE /api/v1/oauth/grants/{client_id}`

## Request

- Base URL: `https://cooperemail.com`
- URL: `https://cooperemail.com/api/v1/oauth/grants/{client_id}`
- Auth: HTTP bearer

## Path parameters

- `client_id` string, required

## Response `200`

Grant revoked

- object
  - `object` 'oauth_grant', required
  - `id` string, required
  - `revoked` true, required
  - `tokens_revoked` integer, required

---

[API](https://skmtc.dev/cooperemail/apis/cooper-email-api.md) · [All operations](https://skmtc.dev/cooperemail/apis/cooper-email-api/llms.txt) · [OpenAPI document](https://skmtc.dev/cooperemail/apis/cooper-email-api/revisions/6d800a7b3e33?raw)