---
title: "Invalidate OAuth refresh token"
method: DELETE
path: "/tyk/oauth/refresh/{keyName}"
tags: ["OAuth"]
---

# Invalidate OAuth refresh token

`DELETE /tyk/oauth/refresh/{keyName}`

It is possible to invalidate refresh tokens in order to manage OAuth client access more robustly.

## Path parameters

- `keyName` string, required

## Query parameters

- `api_id` string, required

## Response `200`

Deleted

- ApiModifyKeySuccess
  - `action` string
  - `key` string
  - `key_hash` string
  - `status` string

## Other responses

- `400` — missing api_Id query parameter
- `403` — Forbidden
- `404` — Not Found
- `500` — Internal server error.

## Changes

- **2024-09-18** `111affa17abe` — 4 info
  - added the non-success response with the status `400`
  - added the non-success response with the status `403`
  - added the non-success response with the status `404`
  - added the non-success response with the status `500`
- **2022-05-24** `111d8ca21864` — 4 info
  - removed the non-success response with the status `400`
  - removed the non-success response with the status `403`
  - removed the non-success response with the status `404`
  - removed the non-success response with the status `500`

[Change history](https://skmtc.dev/tyktechnologies/apis/tyk-gateway-api/changes/tyk/oauth/refresh/:keyName/delete.md)

---

[API](https://skmtc.dev/tyktechnologies/apis/tyk-gateway-api.md) · [All operations](https://skmtc.dev/tyktechnologies/apis/tyk-gateway-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/tyktechnologies/tyk-gateway-api/revisions/900d0a33ae1d/schema)