---
title: "Revoke Org Personal Access Token"
method: POST
path: "/api/v1/orgs/current/personal-access-tokens/{pat_id}/revocation"
tags: ["orgs"]
---

# Revoke Org Personal Access Token

`POST /api/v1/orgs/current/personal-access-tokens/{pat_id}/revocation`

## Request

- Base URL: `https://api.smith.langchain.com`
- URL: `https://api.smith.langchain.com/api/v1/orgs/current/personal-access-tokens/{pat_id}/revocation`
- Auth: one of:
  - API key in header `X-API-Key`
  - API key in header `X-Organization-Id`
  - HTTP bearer

Revoke a personal access token, so it stops working but its record remains.

The token is marked revoked rather than deleted, and stops authenticating as
soon as its cached auth entry refreshes. Its expiry is left untouched, so the
revocation can be lifted by deleting it. Callers may always revoke their own
tokens; organization admins may revoke any member's.

## Path parameters

- `pat_id` string, uuid, required

## Response `200`

Successful Response

- APIKeyGetResponse: API key GET schema. role_id, org_role_id, and access_scope let clients render the key's current role state without a second round trip. For workspace-scoped service keys, org_role_id comes from the parent organization identity.
  - `created_at` string, date-time, nullable
  - `id` string, uuid, required
  - `short_key` string, required
  - `description` string, required
  - `read_only` boolean
  - `last_used_at` string, date-time, nullable
  - `expires_at` string, date-time, nullable
  - `revoked_at` string, date-time, nullable
  - `workspace_names` string[], nullable
  - `default_workspace_name` string, nullable
  - `role_id` string, uuid, nullable
  - `org_role_id` string, uuid, nullable
  - `access_scope` 'organization' | 'workspace'
  - `created_by` string, nullable
  - `is_tracing_key` boolean
  - `workspace_ids` string[]
  - `can_delete` boolean: Whether tracing-key deletion authority has been confirmed. Legacy key responses do not evaluate this capability.

## Other responses

- `404`: The personal access token does not exist, or belongs to another member and the caller may not administer other members' tokens.
- `422`: Validation Error

## Changes

- **2026-10-16** `1a8ee9358d81`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/langchain-ai/apis/langsmith/changes/api/v1/orgs/current/personal-access-tokens/:pat_id/revocation/post.md)

---

[API](https://skmtc.dev/langchain-ai/apis/langsmith.md) - [All operations](https://skmtc.dev/langchain-ai/apis/langsmith/llms.txt) - [OpenAPI document](https://skmtc.dev/langchain-ai/apis/langsmith/revisions/7a01c01f75e8?raw)