---
title: "Revoke a push token immediately"
method: DELETE
path: "/v0/connectors/{connector_id}/tokens/{token_id}"
tags: ["Connectors"]
---

# Revoke a push token immediately

`DELETE /v0/connectors/{connector_id}/tokens/{token_id}`

## Request

- Base URL: `https://docs.quivr.thevibecompany.co` (the document declares no server; this is the origin it was published from)
- URL: `https://docs.quivr.thevibecompany.co/v0/connectors/{connector_id}/tokens/{token_id}`
- Auth: HTTP bearer

Requires connectors:admin on the instance's Organization and Corpus. Revoke this token, even during rotation overlap or after the instance is disabled. Every authentication checks durable validity without a cache, so new authentications after the commit fail immediately; already admitted deliveries may finish. Revocation is idempotent and returns metadata only. Revoking an old token does not revoke its replacement; revoke each token_id that should lose access. No request body is needed.

## Response `200`

Revoked token metadata, never a secret.

- ConnectorToken
  - `token_id` string, required
  - `prefix` string, required: Display prefix only; cannot authenticate.
  - `created_at` string, date-time, required
  - `rotated_at` string, date-time
  - `revoked_at` string, date-time
  - `valid_until` string, date-time: Exclusive expiry of an old token after rotation; absent for an unrotated token.

## Other responses

- `default`: JSON Error envelope; 401 unauthenticated, 403 without admin permission, 404 unknown or foreign token, 503 unavailable.

---

[API](https://skmtc.dev/thevibecompany/apis/quivr-http-api.md) - [All operations](https://skmtc.dev/thevibecompany/apis/quivr-http-api/llms.txt) - [OpenAPI document](https://skmtc.dev/thevibecompany/apis/quivr-http-api/revisions/4f4e30ba8f4e?raw)