---
title: "Delete Token"
method: DELETE
path: "/auth/token"
tags: ["Auth"]
---

# Delete Token

`DELETE /auth/token`

This endpoint revokes the token passed in the Authorization header. This service is applicable for JWT-based (and all API key-based) authentication and also client credential (clientId and secret) based authentication. This service does not return a response body. The HTTP response code is 204 (success with no content). <br>Tokens generally have limited lifetime of up to 30 minutes. You will call this service when you finish working with one user, and you want to delete the valid token rather than simply letting it expire.<br><br><b>Note:</b> <li>Revoking an access token (either type, admin or a user token) can take up to 2 minutes, as the tokens are stored on a distributed system.<br/>

## Response `204`

No Content

## Other responses

- `401` — Y020 : Invalid token in authorization header<br>Y023 : Token has expired<br>Y016 : Api-Version header missing<br>Y015 : Unauthorized User<br>Y027 : Unsupported authentication type<br>Y007 : Authorization header missing<br>Y020 : Invalid token in authorization header
- `404` — Not Found

---

[API](https://skmtc.net/yodlee/apis/yodlee-core-apis.md) · [All operations](https://skmtc.net/yodlee/apis/yodlee-core-apis/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/yodlee/yodlee-core-apis/versions/3bc0042deba8/schema)