---
title: "Revoke an OAuth token"
method: POST
path: "/oauth/revoke"
tags: ["plaid"]
---

# Revoke an OAuth token

`POST /oauth/revoke`

`/oauth/revoke` revokes an access or refresh token, preventing any further use. If a refresh token is revoked, all access and refresh tokens derived from it are also revoked, including exchanged tokens.

Note: This endpoint supports `Content-Type: application/x-www-form-urlencoded` as well as JSON. The fields for the form are equivalent to the fields for JSON and conform to the OAuth 2.0 specification.

## Request body

- OAuthRevokeRequest — OAuth token revoke request
  - `token` string, required — An OAuth token of any type (`refresh_token`, `access_token`, etc)
  - `client_id` string — Your Plaid API `client_id`. The `client_id` is required and may be provided either in the `PLAID-CLIENT-ID` header or as part of a request body.
  - `client_secret` string — Your Plaid API `secret`. The `secret` is required and may be provided either in the `PLAID-SECRET` header or as part of a request body as either `secret` or `client_secret`.
  - `secret` string — Your Plaid API `secret`. The `secret` is required and may be provided either in the `PLAID-SECRET` header or as part of a request body as either `secret` or `client_secret`.

## Response `200`

OK

- OAuthRevokeResponse — Successful OAuth token revoke response
  - `request_id` string, required — A unique identifier for the request, which can be used for troubleshooting. This identifier, like all Plaid identifiers, is case sensitive.

## Other responses

- `default` — Error response.

## Changes

- **2025-05-19** `02e6d58e95e9` — 3 breaking, 1 info
  - the response property `error` became optional for the status `default`
  - the response property `error_description` became optional for the status `default`
  - the response property `error_uri` became optional for the status `default`
  - added the new optional request property `secret`
- **2025-05-01** `89dcf373f0a2` — 1 info
  - endpoint added
- **2024-02-21** `5de70cc1e6ca` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/plaid/apis/the-plaid-api/changes/oauth/revoke/post.md)

---

[API](https://skmtc.dev/plaid/apis/the-plaid-api.md) · [All operations](https://skmtc.dev/plaid/apis/the-plaid-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/plaid/the-plaid-api/revisions/e536704a333f/schema)