---
title: "Revoke a token"
method: POST
path: "/oauth/revoke"
tags: ["OAuth"]
---

# Revoke a token

`POST /oauth/revoke`

## Request

- The document declares no server URL.
- Auth: none declared

Implements RFC 7009 token revocation. Always responds 200, whether or not the token existed, so as not to leak which tokens are valid. Revoking a refresh token also revokes the access token issued alongside it. No authentication is required.

## Request body `application/x-www-form-urlencoded`

- object
  - `token` string, required

## Response `200`

The token was revoked, or did not exist.

## Changes

- **2026-09-28** `d47e9fb78ad0`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/pgedge/apis/pgedge-postgres-mcp-server-api/changes/oauth/revoke/post.md)

---

[API](https://skmtc.dev/pgedge/apis/pgedge-postgres-mcp-server-api.md) - [All operations](https://skmtc.dev/pgedge/apis/pgedge-postgres-mcp-server-api/llms.txt) - [OpenAPI document](https://skmtc.dev/pgedge/apis/pgedge-postgres-mcp-server-api/revisions/d47e9fb78ad0?raw)