---
title: "Revokes the access token"
method: POST
path: "/csc/v0/auth/revoke"
tags: ["CSC (v0)"]
---

# Revokes the access token

`POST /csc/v0/auth/revoke`

## Request

- Base URL: `https://one.digicert.com/documentmanager`
- URL: `https://one.digicert.com/documentmanager/csc/v0/auth/revoke`
- Auth: one of:
  - API key in header `X-API-Key`
  - OAuth 2
    - Client credentials
    - Token URL: `/imauth/oauth2/token` scopes: `service`
  - OAuth 2
    - Authorization code: `/imauth/oauth2/authorize`
    - Token URL: `/imauth/oauth2/token` scopes: `service`
- TypeScript: <https://skmtc.dev/digicert/apis/digicert-content-trust-manager/docs/csc/v0/auth/revoke/post.ts> (a function with typed inputs; its response is checked against the schema)

Use this endpoint to revoke the access token of the current session.

## Request body

- CscRevokeTokenRequest
  - `token` string, required: The token that the Signature Application wants to get revoked.
  - `token_type_hint` string: Specifies an optional hint about the type of the token submitted for revocation. If the parameter is omitted, the authorization server should try to identify the token across all the available tokens.
  - `client_data` string: Arbitrary data from the Signature Application. It can be used to handle a transaction identifier or other application-specific data.

## Response `204`

Revoke success

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `500`: Internal Server Error

---

[API](https://skmtc.dev/digicert/apis/digicert-content-trust-manager.md) - [All operations](https://skmtc.dev/digicert/apis/digicert-content-trust-manager/llms.txt) - [OpenAPI document](https://skmtc.dev/digicert/apis/digicert-content-trust-manager/revisions/8dec322a0e2b?raw)