---
title: "Self-revoke the presenting token"
method: POST
path: "/api/agent/token/revoke"
tags: ["auth"]
---

# Self-revoke the presenting token

`POST /api/agent/token/revoke`

## Request

- Base URL: `https://www.immersivecommons.com`
- URL: `https://www.immersivecommons.com/api/agent/token/revoke`
- Auth: HTTP bearer

agt_ token required. The presented token revokes ITSELF (self-destruction, not privilege escalation) — it cannot revoke other tokens. Idempotent: re-revoking an already-revoked token returns `already_revoked: true`.

## Response `200`

Token revoked.

- TokenRevokeResponse
  - `ok` boolean, required
  - `revoked` boolean, required
  - `prefix` string
  - `already_revoked` boolean

## Other responses

- `401`: Missing/malformed/unknown/already-revoked token.
- `500`: KV write failed (safe to retry).

---

[API](https://skmtc.dev/immersivecommons/apis/immersive-commons-agent-rest-api.md) · [All operations](https://skmtc.dev/immersivecommons/apis/immersive-commons-agent-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/immersivecommons/apis/immersive-commons-agent-rest-api/revisions/be67c1f67c27?raw)