---
title: "Revoke a user grant"
method: DELETE
path: "/api/users/{userId}/grants/{grantId}"
tags: ["Users"]
---

# Revoke a user grant

`DELETE /api/users/{userId}/grants/{grantId}`

Revoke a specific grant and its associated token chain by grant ID. Also removes the matching session authorization entry for this grant from the related active session. The grant must belong to the user.

## Path parameters

- `userId` string, required
- `grantId` string, required

## Response `204`

Grant revoked successfully. If the grant already expired, this endpoint returns success without token-chain changes.

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Grant not found. This can occur if the grant ID is invalid, or the grant does not belong to the user.
- `500` — Internal Server Error

---

[API](https://skmtc.net/logto/apis/logto-api-references.md) · [All operations](https://skmtc.net/logto/apis/logto-api-references/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/logto/logto-api-references/versions/a163dc77d842/schema)