---
title: "Revoke a token (RFC 7009)"
method: POST
path: "/oauth/revoke"
tags: ["OAuth"]
---

# Revoke a token (RFC 7009)

`POST /oauth/revoke`

## Request

- Base URL: `https://api.groundmail.dev`
- URL: `https://api.groundmail.dev/oauth/revoke`
- Auth: none required

Revoking a refresh token ends the sign-in: it and every access token it issued stop working. Revoking an access token revokes only that token. Always 200, whether or not the token was known.

## Request body

- OAuthRevokeRequest
  - `token` string, required
  - `token_type_hint` 'access_token' | 'refresh_token'
  - `client_id` string

## Response `200`

Revoked (or unknown)

## Other responses

- `429`: Rate limited (`Retry-After`)

---

[API](https://skmtc.dev/groundmail/apis/groundmail-api.md) · [All operations](https://skmtc.dev/groundmail/apis/groundmail-api/llms.txt) · [OpenAPI document](https://skmtc.dev/groundmail/apis/groundmail-api/revisions/479821c9fecf?raw)