---
title: "Revoke user authentication token"
method: DELETE
path: "/v1/users/{user-id}/tokens/{token-id}"
tags: ["Users"]
---

# Revoke user authentication token

`DELETE /v1/users/{user-id}/tokens/{token-id}`

Revoke an authentication token belonging to the user. A user may revoke their
own tokens; revoking another user's token requires MANAGE_USERS access right.

Only persistent tokens can be revoked this way, because only they are assigned an ID;
a token-id of 0 is rejected with 400. Ephemeral, service and single-use tokens are not
revocable individually - they expire, or, for a single-use token, are consumed by the
login that spends it.

## Path parameters

- `user-id` integer, required
- `token-id` integer, required

## Response `204`

Token revoked

## Other responses

- `400` — Invalid user or token ID
- `401` — Unauthorized
- `403` — Access denied (not self and no MANAGE_USERS right)
- `404` — Token not found for this user

---

[API](https://skmtc.net/netxms/apis/netxms-api.md) · [All operations](https://skmtc.net/netxms/apis/netxms-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/netxms/netxms-api/versions/ee1f54ee3abd/schema)