oauth

Disconnect

Revoke every connector token this user has authorized.

The tokens are 30-day JWTs with no server-side row to delete, so revocation is an epoch: anything minted before now is refused by lifecycle.enforce_token_live. Clearing the connected-agent state alongside it keeps the settings screen honest.

Not scoped to one connector on purpose — a token carries no client identity to scope by (/oauth/register persists nothing), so pretending otherwise would be a lie in the UI.

post/oauth/disconnect

Request

  • Base URL: https://api.iridiumhqmcp.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.iridiumhqmcp.com/oauth/disconnect
  • Auth: HTTP bearer

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.