---
title: "Revoke"
method: POST
path: "/oauth/revoke"
tags: ["OAuth"]
---

# Revoke

`POST /oauth/revoke`

## Request

- Base URL: `https://api.kolens.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.kolens.ai/oauth/revoke`
- Auth: none declared

RFC 7009. Revoke an access or refresh token. Returns 200 even
when the token is unknown (per spec — revoking a non-existent
token should not signal anything to a probe). For refresh tokens
we also revoke the paired access tokens so a leaked refresh can't
keep an attacker minting fresh access tokens after the user disconnects.

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/kolens/apis/kolens-api.md) · [All operations](https://skmtc.dev/kolens/apis/kolens-api/llms.txt) · [OpenAPI document](https://skmtc.dev/kolens/apis/kolens-api/revisions/5d6865ab0a24?raw)