---
title: "Revoke Extension Credential Route"
method: POST
path: "/browser-extension/credentials/revoke/"
tags: ["browser-extension"]
---

# Revoke Extension Credential Route

`POST /browser-extension/credentials/revoke/`

Delete the presented credential; the extension calls this on sign-out.

Deliberately not flag-gated: cleanup must keep working for a user whose
flag was just turned off. Idempotent — revoking twice reports
revoked=false the second time because the credential no longer
authenticates.

## Response `200`

Successful Response

- ExtensionCredentialRevokeResponse
  - `revoked` boolean, required

---

[API](https://skmtc.dev/helloaxel/apis/client-api-gateway.md) · [All operations](https://skmtc.dev/helloaxel/apis/client-api-gateway/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/helloaxel/client-api-gateway/revisions/7ffb16b1c40d/schema)