---
title: "Revoke a linked payment token"
method: POST
path: "/tokenized-payment/v1/tokens/unlink"
tags: ["Account Linking"]
---

# Revoke a linked payment token

`POST /tokenized-payment/v1/tokens/unlink`

## Request

- Base URL: `https://integrations-sandbox.shopback.com/demo/merchant`
- URL: `https://integrations-sandbox.shopback.com/demo/merchant/tokenized-payment/v1/tokens/unlink`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/shopback/apis/online-payments-api/docs/tokenized-payment/v1/tokens/unlink/post.ts> (a function with typed inputs; its response is checked against the schema)

Unlinks a payment token for the authenticated merchant channel. Returns 400 if an active pre-auth (AUTHORIZED) is still open for the account.

## Request body

- UnlinkPaymentTokenRequest
  - `paymentToken` string, required: Payment token to revoke. Sent in the request body (not the URL) to prevent the value from appearing in access logs and APM telemetry.

## Response `200`

Payment token successfully unlinked.

- UnlinkPaymentTokenResponse
  - `paymentToken` string, required: The payment token that was revoked.
  - `status` 'LINKED' | 'UNLINKED', required: New status of the payment token after revocation.

## Other responses

- `400`: paymentToken field is missing from the body, or an active pre-auth blocks the unlink.
- `401`: Missing or invalid merchant JWT.
- `404`: Payment token not found or already unlinked.

---

[API](https://skmtc.dev/shopback/apis/online-payments-api.md) - [All operations](https://skmtc.dev/shopback/apis/online-payments-api/llms.txt) - [OpenAPI document](https://skmtc.dev/shopback/apis/online-payments-api/revisions/a3ac503a275e?raw)