Sign in
Personal Access Tokens

Admin: revoke any user's personal access token by id

Revokes a token by id, scoped to the org's PAT client but not to a specific owning user — the admin counterpart to DELETE /personal-access-tokens/{tokenId}. Requires org-admin privileges (userAdminCheck); returns 400 (not 403) for a non-admin caller, same as GET /personal-access-tokens/admin.

delete/personal-access-tokens/admin/{tokenId}

Path parameters

tokenIdstring required

Personal access token ID

Request body

reasonstring

Example request

{
  "reason": "rotated"
}

Response

Personal access token revoked successfully

messagestring required

Example response

{
  "message": "Personal access token revoked successfully"
}

Changes

Changed in 1 of the 15 revisions of this API.1