---
title: "Revoke an OAuth connection (RFC 7009)"
method: POST
path: "/api/oauth/revoke"
tags: ["auth"]
---

# Revoke an OAuth connection (RFC 7009)

`POST /api/oauth/revoke`

## Request

- Base URL: `https://www.immersivecommons.com`
- URL: `https://www.immersivecommons.com/api/oauth/revoke`
- Auth: none required

Anonymous; the token must have been issued to the client_id presented. Revokes the whole connection (access + refresh). 200 for unknown, foreign or already-revoked tokens. Console and device-code tokens are revoked at /floor10/agent-console, not here. 404 unless the deployment sets OAUTH_CODE_FLOW_ENABLED=true.

## Response `200`

Revoked (or nothing to revoke).

- OAuthRevokeResponse

## Other responses

- `400`: token or client_id missing.
- `503`: Revocation could not be recorded; retry.

---

[API](https://skmtc.dev/immersivecommons/apis/immersive-commons-agent-rest-api.md) · [All operations](https://skmtc.dev/immersivecommons/apis/immersive-commons-agent-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/immersivecommons/apis/immersive-commons-agent-rest-api/revisions/be67c1f67c27?raw)