revoke_token
Revoke one of the authenticated person's own tokens by id. Self-revocation is refused.
Revoke one of the authenticated person's own personal access tokens by id. Refuses self-revocation: the token authenticating this call cannot delete its own row. Revoke the current token under Account Settings → API Tokens or from a different token instead. Revocation is immediate; any client still holding the token gets AUTHENTICATION_REQUIRED on its next call. Idempotent: an id already revoked answers RESOURCE_NOT_FOUND, exactly as an id that was never yours does.
Requires ability
The token behind the MCP session must hold it, or the call is refused with TOKEN_MISSING_ABILITY.
Runs the same action as
The REST endpoint and this tool share one action, so validation, permissions and events are identical.
Fires one event
Delivered to every endpoint subscribed to it once the change is made.
Annotations
A client that honours annotations asks a person before running it. Sending the same arguments twice changes nothing the second time.
Arguments
token_id*stringId of the token to revoke, as `list_tokens` reports it. Must belong to the authenticated person and cannot be the token authenticating this call.
What it returns
{ "data": { "token_id": "1284", "revoked": true }, "meta": {}}How it fails
AUTHENTICATION_REQUIREDno authenticated user on the request.
VALIDATION_FAILEDtoken_id is empty, or the caller tried to revoke the token making the call.
RESOURCE_NOT_FOUNDthe token does not belong to the authenticated person, or was already revoked.
TOKEN_MISSING_ABILITYtoken lacks token:delete.
How is this guide?
Last updated on