---
title: "Admin: revoke any user's personal access token by id"
method: DELETE
path: "/personal-access-tokens/admin/{tokenId}"
tags: ["Personal Access Tokens"]
---

# Admin: revoke any user's personal access token by id

`DELETE /personal-access-tokens/admin/{tokenId}`

Revokes a token by id, scoped to the org's PAT client but **not** to
a specific owning user — the admin counterpart to
`DELETE /personal-access-tokens/{tokenId}`. Requires org-admin
privileges (`userAdminCheck`); returns `400` (not `403`) for a
non-admin caller, same as `GET /personal-access-tokens/admin`.

## Path parameters

- `tokenId` string, required

## Request body

- RevokePatRequest — Optional request body for `DELETE /personal-access-tokens/{tokenId}` and `DELETE /personal-access-tokens/admin/{tokenId}`. The body itself is optional; `reason`, if present, is stored on the revocation for auditing.
  - `reason` string

## Response `200`

Personal access token revoked successfully

- RevokePatResponse
  - `message` string, required

## Other responses

- `400` — Invalid token ID, or the caller is not an org admin
- `401` — Unauthorized
- `404` — Token not found in this org, already revoked, or the org has no PAT app yet
- `429` — Rate limit exceeded

---

[API](https://skmtc.net/pipeshub-ai/apis/pipeshub-api.md) · [All operations](https://skmtc.net/pipeshub-ai/apis/pipeshub-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/pipeshub-ai/pipeshub-api/revisions/11f5086fcbb8/schema)