---
title: "Revoke Token Rfc7009 Compliant"
method: POST
path: "/api/v1/revoke"
tags: ["Authorization"]
---

# Revoke Token Rfc7009 Compliant

`POST /api/v1/revoke`

Revoke an access token according to RFC 7009 OAuth Token Revocation.

This endpoint accepts form-encoded data and follows the OAuth 2.0 Token Revocation specification.
The client must authenticate using HTTP Basic authentication with their client credentials.

Authentication is performed via the Authorization header with the format:
Authorization: Basic base64(client_id:client_secret)

## Request body

- Body8e7e8a3c
  - `token` string, required — The token to be revoked (access token).
  - `token_type_hint` string, nullable — A hint about the type of the token being revoked (optional). Expected value: 'access_token'

## Response `200`

Successful Response

- unknown

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found

---

[API](https://skmtc.net/todoist/apis/todoist-api.md) · [All operations](https://skmtc.net/todoist/apis/todoist-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/todoist/todoist-api/revisions/69a962f1578f/schema)