---
title: "POST /developer-apps/{app_id}/credentials/{credential_id}/revoke"
method: POST
path: "/developer-apps/{app_id}/credentials/{credential_id}/revoke"
tags: ["Control plane"]
---

# POST /developer-apps/{app_id}/credentials/{credential_id}/revoke

`POST /developer-apps/{app_id}/credentials/{credential_id}/revoke`

## Request

- Base URL: `https://api.team0.ai/v1`
- URL: `https://api.team0.ai/v1/developer-apps/{app_id}/credentials/{credential_id}/revoke`
- Auth: one of:
  - OAuth 2 (authorization code, authorization URL `https://clerk.team0.ai/oauth/authorize`, token URL `https://clerk.team0.ai/oauth/token`)
  - HTTP bearer

## Path parameters

- `app_id` string, required
- `credential_id` string, required

## Headers

- `Idempotency-Key` string, required
- `If-Match` string, required

## Response `200`

Credential revoked and grant version advanced.

- Credential
  - `id` string, required
  - `object` 'api_credential', required
  - `name` string, required
  - `hint` string, required
  - `scopes` string[], required
  - `status` 'active' | 'expiring' | 'revoked' | 'expired', required
  - `expires_at` string, date-time, required
  - `version` integer, required

## Other responses

- `default`: RFC 9457 problem response. Cross-tenant identity is non-enumerating.

---

[API](https://skmtc.dev/team0/apis/team0-external-api.md) · [All operations](https://skmtc.dev/team0/apis/team0-external-api/llms.txt) · [OpenAPI document](https://skmtc.dev/team0/apis/team0-external-api/revisions/9b838d20a98f?raw)