---
title: "Revoke user authentication token"
method: DELETE
path: "/v1/users/{user-id}/tokens/{token-id}"
tags: ["Users"]
---

# Revoke user authentication token

`DELETE /v1/users/{user-id}/tokens/{token-id}`

Revoke an authentication token belonging to the user. A user may revoke their
own tokens; revoking another user's token requires MANAGE_USERS access right.

Only persistent tokens can be revoked this way, because only they are assigned an ID;
a token-id of 0 is rejected with 400. Ephemeral, service and single-use tokens are not
revocable individually - they expire, or, for a single-use token, are consumed by the
login that spends it.

## Path parameters

- `user-id` integer, required
- `token-id` integer, required

## Response `204`

Token revoked

## Other responses

- `400` — Invalid user or token ID
- `401` — Unauthorized
- `403` — Access denied (not self and no MANAGE_USERS right)
- `404` — Token not found for this user

## Changes

- **2026-07-14** `6c7a0c985250` — 1 info
  - endpoint added
- **2026-05-08** `c6aaf3632e48` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/netxms/apis/netxms-api/changes/v1/users/:user-id/tokens/:token-id/delete.md)

---

[API](https://skmtc.dev/netxms/apis/netxms-api.md) · [All operations](https://skmtc.dev/netxms/apis/netxms-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/netxms/netxms-api/revisions/d95e9a81f256/schema)