---
title: "Revoke an API token"
method: DELETE
path: "/api/tokens/{tokenID}"
tags: ["Auth"]
---

# Revoke an API token

`DELETE /api/tokens/{tokenID}`

## Request

- The document declares no server URL.
- Auth: none declared. Required headers: `Authorization`

## Path parameters

- `tokenID` string, required

## Headers

- `Authorization` string, required

## Response `200`

OK

- ServerAPITokenView
  - `clusters` string[]: cluster scope; ["*"] = all
  - `createdAt` string
  - `createdFrom` string
  - `expired` boolean
  - `expiresAt` string
  - `grants` string[]: compact grant prefixes requested by the owner
  - `id` string
  - `label` string
  - `lastUsedAt` string
  - `lastUsedFrom` string
  - `ownerAuthType` string: OwnerAuthType is how the owner was authenticated when the token was issued ("SSO" or "Local"): a token issued by a Cloud18 identity keeps that identity for the self-service rules, which need an SSO caller.
  - `revoked` boolean
  - `revokedAt` string
  - `revokedBy` string
  - `token` string
  - `user` string

## Other responses

- `403`: Forbidden
- `404`: Not found

## Changes

- **2026-10-05** `1bf429f49b60`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/signal18/apis/signal-18-dashboard-api/changes/api/tokens/:tokenID/delete.md)

---

[API](https://skmtc.dev/signal18/apis/signal-18-dashboard-api.md) - [All operations](https://skmtc.dev/signal18/apis/signal-18-dashboard-api/llms.txt) - [OpenAPI document](https://skmtc.dev/signal18/apis/signal-18-dashboard-api/revisions/8ee8a1e31294?raw)