---
title: "Revoke Token"
method: POST
path: "/oauth/revoke"
tags: ["OAuth"]
---

# Revoke Token

`POST /oauth/revoke`

RFC 7009 token revocation. Revokes an access or refresh token. Always returns 200 (per spec) even if the token is unknown, to prevent token enumeration.

## Response `200`

Empty body (RFC 7009)

- object — Empty body (RFC 7009)

## Other responses

- `400` — Default Response

---

[API](https://skmtc.net/bkeyid/apis/bkey-api.md) · [All operations](https://skmtc.net/bkeyid/apis/bkey-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bkeyid/bkey-api/versions/2c7566abec9e/schema)