---
title: "End a CLI browser session using its refresh token"
method: POST
path: "/v1/auth/revoke"
tags: ["Authentication"]
---

# End a CLI browser session using its refresh token

`POST /v1/auth/revoke`

## Request

- Base URL: `https://api.masko.ai`
- URL: `https://api.masko.ai/v1/auth/revoke`
- Auth: none required

Idempotent. Ends access immediately. Does not revoke API keys or other installations.

## Request body

- object
  - `refresh_token` string, required

## Response `200`

Success. Cache-Control: no-store.

- object
  - `data` object, required
    - `revoked` boolean, required

## Other responses

- `400`: Validation or device-grant state error.
- `429`: Rate limited.
- `503`: Authentication service unavailable.

---

[API](https://skmtc.dev/masko/apis/masko-api.md) · [All operations](https://skmtc.dev/masko/apis/masko-api/llms.txt) · [OpenAPI document](https://skmtc.dev/masko/apis/masko-api/revisions/91eb3006a92f?raw)