---
title: "Tunnel Grants Revoke"
method: POST
path: "/tunnel/grants/revoke"
---

# Tunnel Grants Revoke

`POST /tunnel/grants/revoke`

## Request

- Base URL: `https://api.local-mcp.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.local-mcp.com/tunnel/grants/revoke`
- Auth: none declared

Revoke ONE grant of this machine, on any of its live tokens (lmcp-api#270). Body
{machine_id, grant_id, client_time, signature}, signed over grants_message(..., "revoke",
grant_id, ...). The AI's per-AI tokens stop working (at once on this replica, within 30 s on
the others), its refresh tokens and pending codes are deleted; other grants and the machine
token are untouched. 200 {revoked, grant_id, access_tokens_revoked, refresh_tokens_deleted,
residual_access} · 404 not_connected · 409 not_revocable (an AI bound by the machine token in
its URL) · the refusals of /tunnel/grants.

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.dev/local-mcp/apis/lmcp-api.md) · [All operations](https://skmtc.dev/local-mcp/apis/lmcp-api/llms.txt) · [OpenAPI document](https://skmtc.dev/local-mcp/apis/lmcp-api/revisions/f1f1c502623a?raw)