---
title: "Revoke"
method: POST
path: "/revoke"
tags: ["oauth"]
---

# Revoke

`POST /revoke`

## Request

- Base URL: `https://app.zeno-works.ch` (the document declares no server; this is the origin it was published from)
- URL: `https://app.zeno-works.ch/revoke`
- Auth: none declared

RFC 7009. **Always 200**, even for a token that does not exist.

The RFC requires it, and the reason is the same one this codebase applies to signup:
distinguishing "revoked" from "never existed" tells a caller which of their guesses was
a real credential.

Revokes the **grant**, not the key — with rotation one consent owns a lineage, and
revoking a single key would leave the rest live.

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.dev/zeno-works/apis/zeno-api.md) · [All operations](https://skmtc.dev/zeno-works/apis/zeno-api/llms.txt) · [OpenAPI document](https://skmtc.dev/zeno-works/apis/zeno-api/revisions/1eb93dde146c?raw)