---
title: "RFC 7009 token revocation"
method: POST
path: "/oauth/revoke"
---

# RFC 7009 token revocation

`POST /oauth/revoke`

## Request

- Base URL: `https://api.local-mcp.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.local-mcp.com/oauth/revoke`
- Auth: none declared

Revoking a refresh token disconnects that AI from that machine: it can no longer refresh, its own access tokens (lmcp-oa-…) stop working, and it leaves the machine's connected list; other AIs are untouched. Revoking a per-AI access token (lmcp-oa-…) ends that token only. An AI connected before per-AI tokens still holds the machine's own token until it re-authorizes or refreshes; revoking THAT token revokes the machine's token for every client and for the machine's own tunnel until the app gets a new one. (lmcp-api#48 option A; per-AI tokens lmcp-api#83.)

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.dev/local-mcp/apis/lmcp-api.md) · [All operations](https://skmtc.dev/local-mcp/apis/lmcp-api/llms.txt) · [OpenAPI document](https://skmtc.dev/local-mcp/apis/lmcp-api/revisions/f1f1c502623a?raw)