---
title: "Revoke a grant by one of its tokens (RFC 7009)"
method: POST
path: "/oauth/revoke"
tags: ["OAuth"]
---

# Revoke a grant by one of its tokens (RFC 7009)

`POST /oauth/revoke`

## Request

- Base URL: `https://api.honkio.ca`
- URL: `https://api.honkio.ca/oauth/revoke`
- Auth: none required

Revokes the whole grant the access or refresh token belongs to, including the API key behind it. Answers 200 whether or not there was anything to revoke; only an Authorization header whose Basic credentials cannot be decoded gets 401 invalid_client.

## Response `200`

Revoked, or nothing to revoke.

- object: Revoked, or nothing to revoke.

## Other responses

- `401`: invalid_client: the Basic credentials could not be decoded.
- `429`: slow_down: 30 requests a minute from one address.

---

[API](https://skmtc.dev/honkio/apis/honkio-api.md) · [All operations](https://skmtc.dev/honkio/apis/honkio-api/llms.txt) · [OpenAPI document](https://skmtc.dev/honkio/apis/honkio-api/revisions/ce4ed3fe9691?raw)