---
title: "Revoke an access token."
method: DELETE
path: "/oauth/access_token/{access_token}"
tags: ["OAuth"]
---

# Revoke an access token.

`DELETE /oauth/access_token/{access_token}`

## Request

- Base URL: `https://api.ownerrez.com`
- URL: `https://api.ownerrez.com/oauth/access_token/{access_token}`
- Auth: HTTP basic

Revokes the token, ending this app's access for that user until they authorize again.

Authenticates the OAuth app itself, not a user: HTTP Basic with your client id as the username and client secret as the password. An account email and Personal Access Token do not work here.

## Path parameters

- `access_token` string, required

## Response `204`

The token was revoked.

## Other responses

- `400`: The request was rejected. Note the OAuth 2.0 error shape, which differs from the rest of the API.
- `401`: App authentication failed. Body is `{Message}` (ASP.NET HttpError), not the OAuth `{error, error_description}` shape. Missing Basic also sends `WWW-Authenticate: Basic realm=ownerrez_oauthapp`.

## Changes

- **2026-10-01** `838877899156`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/ownerrez/apis/ownerrez-api/changes/oauth/access_token/:access_token/delete.md)

---

[API](https://skmtc.dev/ownerrez/apis/ownerrez-api.md) - [All operations](https://skmtc.dev/ownerrez/apis/ownerrez-api/llms.txt) - [OpenAPI document](https://skmtc.dev/ownerrez/apis/ownerrez-api/revisions/c400448b7a2a?raw)