---
title: "OAuth 2.0 Token Revocation Endpoint"
method: POST
path: "/restapi/oauth/revoke"
tags: ["OAuth 2.0 / OpenID Connect"]
---

# OAuth 2.0 Token Revocation Endpoint

`POST /restapi/oauth/revoke`

Revokes all active access/refresh tokens and invalidates the OAuth session basing on token provided.
The `token` parameter may be passed in query string or body and may represent access or refresh token.

This endpoint is defined by [RFC-7009 "OAuth 2.0 Token Revocation"](https://datatracker.ietf.org/doc/html/rfc7009)

For confidential client application types
this endpoint requires client authentication using one of the supported
methods (`client_secret_basic`, `client_secret_jwt` or `private_key_jwt`)

## Query parameters

- `token` string

## Response `200`

Successful response

## Other responses

- `400` — The response with **HTTP 400 "Bad request"** status used in some OAuth / OpenID Connect endpoints.

---

[API](https://skmtc.net/ringcentral/apis/ringcentral-api.md) · [All operations](https://skmtc.net/ringcentral/apis/ringcentral-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ringcentral/ringcentral-api/revisions/8d602198ec97/schema)