---
title: "Revoke OAuth grant"
method: DELETE
path: "/user/oauth/grants"
tags: ["user", "oauth-server"]
---

# Revoke OAuth grant

`DELETE /user/oauth/grants`

Revokes the user's OAuth grant for a specific client. This will: - Mark the consent as revoked - Delete all active sessions associated with this OAuth client - Invalidate all refresh tokens for those sessions
Only available when OAuth server is enabled.

## Query parameters

- `client_id` string, uuid, required

## Response `204`

Grant successfully revoked

## Other responses

- `400` — Missing or invalid client_id parameter
- `401` — HTTP Unauthorized response.
- `403` — HTTP Forbidden response.
- `404` — No active grant found for this client

## Changes

- **2025-11-05** `0d4e9964e6ca` — 1 info
  - endpoint added
- **2023-02-01** `144a34ca6d74` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/supabase/apis/supabase-auth-rest-api/changes/user/oauth/grants/delete.md)

---

[API](https://skmtc.dev/supabase/apis/supabase-auth-rest-api.md) · [All operations](https://skmtc.dev/supabase/apis/supabase-auth-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/supabase/supabase-auth-rest-api/revisions/2e2a74a7459f/schema)