---
title: "Revoke access"
method: POST
path: "/api/internal/revoke"
tags: ["Internal"]
---

# Revoke access

`POST /api/internal/revoke`

Internal endpoint to revoke access tokens. Use with caution. Requires HKA_REVOCATION_KEY environment variable authentication. This is used for Revoker to allow security researchers to revoke compromised tokens.

## Request body

- object
  - `token` string, required

## Response `200`

successful

- object
  - `success` boolean
  - `owner_email` string, nullable
  - `key_name` string, nullable

## Other responses

- `400` — bad request

## Changes

- **2026-01-27** (v1) `b6d6849481da` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/hackclub/apis/hackatime-api/changes/api/internal/revoke/post.md)

---

[API](https://skmtc.dev/hackclub/apis/hackatime-api.md) · [All operations](https://skmtc.dev/hackclub/apis/hackatime-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/hackclub/hackatime-api/revisions/b6d6849481da/schema)