Personal Access Tokens
Revoke one of your own personal access tokens
Revokes a token by id, scoped to {tokenId, clientId, callerUserId} — a caller can never revoke another user's token through this route, even though everyone in the org shares the same underlying pat-system:<orgId> client. Revocation takes effect immediately: the token's next verification attempt fails, including one already in flight.
delete/personal-access-tokens/{tokenId}
Path parameters
tokenIdstring required
Personal access token ID
Request body
Example request
{
"reason": "rotated"
}Response
Personal access token revoked successfully
Example response
{
"message": "Personal access token revoked successfully"
}