---
title: "Revoke an agent's access with its refresh token"
method: POST
path: "/oauth/agent/revoke"
tags: ["Agents"]
---

# Revoke an agent's access with its refresh token

`POST /oauth/agent/revoke`

## Request

- Base URL: `https://api.customdomain.ai`
- URL: `https://api.customdomain.ai/oauth/agent/revoke`
- Auth: none required

RFC 7009. Revokes the grant behind a refresh token, so the agent's access ends within one access token lifetime (15 minutes at most). It answers `200` for a token it does not know, so it cannot be used to find out which tokens exist. The workspace's owners and admins are told once.

## Request body

- object
  - `token` string, required: The refresh token.

## Response `200`

Revoked, or the token was not known

## Other responses

- `400`: `invalid_request`: no token.
- `503`: Agent access is not enabled on this deployment.

---

[API](https://skmtc.dev/customdomain/apis/customdomain-control-plane-api.md) · [All operations](https://skmtc.dev/customdomain/apis/customdomain-control-plane-api/llms.txt) · [OpenAPI document](https://skmtc.dev/customdomain/apis/customdomain-control-plane-api/revisions/34d89cb7a7cd?raw)