---
title: "Revoke a token (RFC 7009)"
method: POST
path: "/oauth/revoke"
tags: ["OAuth"]
---

# Revoke a token (RFC 7009)

`POST /oauth/revoke`

## Request

- Base URL: `https://everypage.co`
- URL: `https://everypage.co/oauth/revoke`
- Auth: none required

Revoke an access or refresh token issued to your OAuth client. Client authentication as on the token endpoint (HTTP Basic or body params). Unknown tokens still answer 200; only client-authentication failures error.

## Response `200`

Always returns 200 (empty body), even for unknown tokens.

## Other responses

- `400`: invalid_request (unparseable form)
- `401`: invalid_client (missing or unknown client_id, or a wrong client_secret)

---

[API](https://skmtc.dev/everypage/apis/everypage-api.md) · [All operations](https://skmtc.dev/everypage/apis/everypage-api/llms.txt) · [OpenAPI document](https://skmtc.dev/everypage/apis/everypage-api/revisions/e6674f903456?raw)