---
title: "Revoke auth token signing keys"
method: POST
path: "/api/auth/revoke-signing-keys"
tags: ["Auth", "GradleEnterprise", "Develocity"]
---

# Revoke auth token signing keys

`POST /api/auth/revoke-signing-keys`

## Request

- Base URL: `https://develocity.example.com`
- URL: `https://develocity.example.com/api/auth/revoke-signing-keys`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/develocity/apis/develocity-api/docs/api/auth/revoke-signing-keys/post.ts> (a function with typed inputs; its response is checked against the schema)

Revokes the existing auth token signing keys, and creates a new one. Requires the `Configure operational settings` permission. All existing access tokens will become invalid. Develocity may take a few minutes to revoke all existing access tokens.

## Response `200`

The existing signing keys have been revoked, all access tokens will become invalid shortly

## Other responses

- `400`: The request cannot be fulfilled due to a problem.
- `403`: The authenticated user has insufficient permissions.
- `404`: The referenced resource either does not exist or the permissions to know about it are missing.
- `500`: The server encountered an unexpected error.

---

[API](https://skmtc.dev/develocity/apis/develocity-api.md) - [All operations](https://skmtc.dev/develocity/apis/develocity-api/llms.txt) - [OpenAPI document](https://skmtc.dev/develocity/apis/develocity-api/revisions/b49835fbf065?raw)