---
title: "Revoke a token"
method: DELETE
path: "/v0/users/{user}/tokens/{token}"
tags: ["users", "tokens"]
deprecated: true
---

# Revoke a token

`DELETE /v0/users/{user}/tokens/{token}`

> **Deprecated.**

DEPRECATED: User API tokens have been deprecated in favor of user API keys. This endpoint remains available to manage existing API tokens. Create a [user API key](https://bencher.dev/docs/explanation/bencher-run/#--key-key) instead.

Revoke an API token for a user. Revocation is terminal: a revoked token can no longer authenticate any request, and the revocation cannot be undone (for security — a leaked JWT must not become valid again). Only the authenticated user themselves and server admins have access to this endpoint.

## Path parameters

- `token` string, uuid, required
- `user` string, required

## Response `204`

successful deletion

## Other responses

- `4XX` — Error
- `5XX` — Error

---

[API](https://skmtc.net/bencherdev/apis/bencher-api.md) · [All operations](https://skmtc.net/bencherdev/apis/bencher-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bencherdev/bencher-api/revisions/84086e99e6cd/schema)