---
title: "Revoke a token"
method: POST
path: "/api/oauth/revoke"
tags: ["OAuth"]
---

# Revoke a token

`POST /api/oauth/revoke`

## Request

- Base URL: `https://makefx.app`
- URL: `https://makefx.app/api/oauth/revoke`
- Auth: none declared

RFC 7009. Revoking a refresh token ends its grant; the client must authorize again. Answers 200 with an empty object whether or not the token was known, as the RFC requires.

## Headers

- `API-Version` '2026-09-10'

## Request body

- object
  - `token` string, required
  - `token_type_hint` 'access_token' | 'refresh_token'
  - `client_id` string
  - `client_secret` string

## Response `200`

Success

- object

## Other responses

- `400`: The request did not match the schema
- `401`: invalid_client: the client credentials were missing or wrong
- `404`: Not found
- `429`: Rate limited. RateLimit names the policy; Retry-After says when to try again
- `500`: Internal server error

---

[API](https://skmtc.dev/makefx/apis/makefx-app-api.md) · [All operations](https://skmtc.dev/makefx/apis/makefx-app-api/llms.txt) · [OpenAPI document](https://skmtc.dev/makefx/apis/makefx-app-api/revisions/a05584da31c6?raw)