---
title: "Revoke"
method: POST
path: "/v1/oauth/revoke"
tags: ["oauth"]
---

# Revoke

`POST /v1/oauth/revoke`

## Request

- Base URL: `https://api.linktodm.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.linktodm.com/v1/oauth/revoke`
- Auth: none declared

Revoke an access or refresh token (RFC 7009).

Always reports success for an authenticated client, so this cannot be
used to probe whether a given token exists.

## Headers

- `authorization` string, nullable

## Request body `application/x-www-form-urlencoded`

- BodyRevokeV1OauthRevokePost
  - `token` string, required
  - `client_id` string, nullable
  - `client_secret` string, nullable

## Response `200`

Successful Response

- RevokeResponse: RFC 7009 always reports success, so revoking an already-invalid token is not an oracle for whether it existed.
  - `revoked` true

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/linktodm/apis/salesmorph.md) - [All operations](https://skmtc.dev/linktodm/apis/salesmorph/llms.txt) - [OpenAPI document](https://skmtc.dev/linktodm/apis/salesmorph/revisions/4af0ad5dbe92?raw)