---
title: "Oauth Revoke"
method: POST
path: "/api/v1/oauth/revoke"
tags: ["oauth2-server"]
---

# Oauth Revoke

`POST /api/v1/oauth/revoke`

## Request

- Base URL: `https://memory.kagura-ai.com` (the document declares no server; this is the origin it was published from)
- URL: `https://memory.kagura-ai.com/api/v1/oauth/revoke`
- Auth: none declared

Revoke an access or refresh token (RFC 7009).

The caller identifies itself (#1741, RFC 7009 §2.1): a public client by
``client_id``, a confidential client with its secret by HTTP Basic or
the form. A token issued to another client is left alone and answered
like an unknown token, ``200`` (§2.2). Revoking a refresh token also
revokes the access token issued with it.

## Response `200`

Successful Response

- unknown

## Other responses

- `400`: Two client authentication methods in one request
- `401`: Missing client_id, unknown client, or bad secret
- `422`: Validation Error

---

[API](https://skmtc.dev/kagura-ai/apis/kagura-memory-cloud.md) · [All operations](https://skmtc.dev/kagura-ai/apis/kagura-memory-cloud/llms.txt) · [OpenAPI document](https://skmtc.dev/kagura-ai/apis/kagura-memory-cloud/revisions/09f17f5ada29?raw)