---
title: "Revoke a workspace Agent token"
method: DELETE
path: "/v1/workspaces/{workspaceId}/agent-tokens/{tokenId}"
tags: ["Workspaces"]
---

# Revoke a workspace Agent token

`DELETE /v1/workspaces/{workspaceId}/agent-tokens/{tokenId}`

Soft-revokes the token (sets revoked_at). The Agent principal keeps its artifacts; mint a new token to re-enable it. Owner/admin only.

## Response `200`

Revoked

## Other responses

- `403` — Caller is not a workspace owner/admin
- `404` — Token not found or already revoked

---

[API](https://skmtc.net/shareout/apis/shareout-rest-api.md) · [All operations](https://skmtc.net/shareout/apis/shareout-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/shareout/shareout-rest-api/revisions/804359ead65a/schema)