---
title: "Revoke a connected OAuth client"
method: DELETE
path: "/me/connected-apps/{id}"
---

# Revoke a connected OAuth client

`DELETE /me/connected-apps/{id}`

## Request

- Base URL: `https://craaft.io/api/v1`
- URL: `https://craaft.io/api/v1/me/connected-apps/{id}`
- Auth: API key in cookie `craaft_session`

Revokes the grant and every access/refresh token issued under it.
The client's next call with either token gets `invalid_grant` /
401 and must send the user through `/oauth/authorize` again.
Session-only, like GET /me/connected-apps.

## Response `204`

Revoked

## Other responses

- `403`: Browser session required - a bearer token (`cra_` or `cro_`) was used against a session-only route and is refused identically to either scheme.
- `404`: Resource doesn't exist or caller isn't a member of its workspace

---

[API](https://skmtc.dev/craaft/apis/craaft-api.md) · [All operations](https://skmtc.dev/craaft/apis/craaft-api/llms.txt) · [OpenAPI document](https://skmtc.dev/craaft/apis/craaft-api/revisions/43e34309dfe2?raw)