---
title: "Revoke a personal API token"
method: DELETE
path: "/api/tokens/{tokenId}"
tags: ["Tokens"]
---

# Revoke a personal API token

`DELETE /api/tokens/{tokenId}`

## Request

- Base URL: `https://tre-app.com`
- URL: `https://tre-app.com/api/tokens/{tokenId}`
- Auth: HTTP bearer

Requires admin token scope or the web session. Read and write tokens receive 403 FORBIDDEN. Personal tokens only: the id of an OAuth access token answers 404 NOT_FOUND (Token not found) — revoke the grant from Connected apps instead. A workspace-bound caller can revoke only its own tokens bound to the same workspace; other token ids answer 404 NOT_FOUND (Token not found).

## Response `204`

No content

## Other responses

- `400`: Invalid request
- `401`: Unauthenticated
- `403`: Forbidden: insufficient role or token scope; scope denials name the held scope and the operation
- `404`: Not found
- `409`: Conflict
- `429`: Rate limited
- `500`: Internal server error
- `503`: Temporarily unavailable

---

[API](https://skmtc.dev/tre-app/apis/tre-rest-api.md) · [All operations](https://skmtc.dev/tre-app/apis/tre-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tre-app/apis/tre-rest-api/revisions/26a7187a05fc?raw)