---
title: "Revoke one API token, effective on its next request"
method: DELETE
path: "/v1/tokens/{id}"
tags: ["admin"]
---

# Revoke one API token, effective on its next request

`DELETE /v1/tokens/{id}`

## Request

- Base URL: `https://api.indraft.io`
- URL: `https://api.indraft.io/v1/tokens/{id}`
- Auth: HTTP bearer

Revokes one token, effective on its next request. The token's history stays, because who did what does not stop being true when a credential is retired.

## Path parameters

- `id` string, required

## Response `200`

Success

- object
  - `revoked` boolean, required

## Other responses

- `401`: No credential, or one that has been revoked.
- `402`: A product quota is spent, or the subscription is not active.
- `403`: Authenticated, and this capability is not held.
- `404`: No such record, or it belongs to another workspace.
- `409`: A conflict the caller can resolve: a stale expectedVersion, an idempotency key reused for different input, an ambiguous or duplicate identity, or a merge that no longer applies.
- `429`: Infrastructure protection tripped. This is not a product quota.
- `500`: A defect on our side. The hint says so, and carries an incident id.
- `507`: The workspace is at its storage ceiling.

---

[API](https://skmtc.dev/indraft/apis/indraft-api.md) · [All operations](https://skmtc.dev/indraft/apis/indraft-api/llms.txt) · [OpenAPI document](https://skmtc.dev/indraft/apis/indraft-api/revisions/d9bb05346d66?raw)