---
title: "Revoke a token"
method: POST
path: "/api/oauth/revoke"
tags: ["OAuth"]
---

# Revoke a token

`POST /api/oauth/revoke`

## Request

- Base URL: `https://app.walkeros.io`
- URL: `https://app.walkeros.io/api/oauth/revoke`
- Auth: none declared

RFC 7009. The client names itself as at the token endpoint. A refresh token revokes its whole rotation family, an access token only itself. A request from a known client always answers 200 with an empty body, unknown tokens included: a distinguishable answer would be an oracle. Body is `application/x-www-form-urlencoded`.

## Response `200`

Revoked, or nothing matched

## Other responses

- `400`: invalid_request or unsupported_token_type
- `401`: invalid_client: unknown or revoked client, or a request that presents a client secret

---

[API](https://skmtc.dev/walkeros/apis/walkeros-tag-manager-api.md) · [All operations](https://skmtc.dev/walkeros/apis/walkeros-tag-manager-api/llms.txt) · [OpenAPI document](https://skmtc.dev/walkeros/apis/walkeros-tag-manager-api/revisions/1b692e17a011?raw)