---
title: "Enable or disable an org-level ingestion token"
method: PATCH
path: "/api/{org_id}/ingestion-tokens/{name}"
tags: ["Organizations"]
---

# Enable or disable an org-level ingestion token

`PATCH /api/{org_id}/ingestion-tokens/{name}`

## Request

- Base URL: `https://api.openobserve.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.openobserve.ai/api/{org_id}/ingestion-tokens/{name}`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/openobserve/apis/openobserve-api-http/docs/api/:org_id/ingestion-tokens/:name/patch.ts> (a function with typed inputs; its response is checked against the schema)

Enables or disables the specified named ingestion token. Disabled tokens cannot be used for ingestion. Requires Admin or Root role.

## Path parameters

- `org_id` string, required
- `name` string, required

## Request body

- object: At least one of the two fields must be present.
  - `enabled` boolean, nullable
  - `splunk_token` 'generate' | 'revoke': Requested change to a Splunk HEC token.

## Response `200`

Success; `message` holds the JSON-encoded {message, splunk_token}

- HttpResponse: HTTP response code 200 is success code 400 is error code 404 is not found code 500 is internal server error code 503 is service unavailable code >= 1000 is custom error code message is the message or error message
  - `code` integer, required
  - `error_detail` string, nullable
  - `hint` string, nullable: One-line guidance on how to fix the error (agent self-correction, D4).
  - `id` string, nullable
  - `message` string, required
  - `name` string, nullable
  - `suggestions` string[], nullable: Closest valid alternatives for a mistyped field/function name.
  - `trace_id` string, nullable
  - `warnings` string[], nullable: Problems with a request that succeeded anyway. Distinct from `hint`, which explains a failure: these accompany a 200, and the caller is entitled to have meant it.

## Other responses

- `403`: Forbidden
- `404`: Not Found

---

[API](https://skmtc.dev/openobserve/apis/openobserve-api-http.md) - [All operations](https://skmtc.dev/openobserve/apis/openobserve-api-http/llms.txt) - [OpenAPI document](https://skmtc.dev/openobserve/apis/openobserve-api-http/revisions/0529b8a10252?raw)