revoke_token

Revoke one of the authenticated user's own tokens by id. Self-revocation is refused.

Purpose

Revoke one of the authenticated user's own personal access tokens by id. Refuses self-revocation — the token authenticating this call cannot delete its own row. Revoke the current session from the dashboard (Settings → API Tokens) or from a different token instead.

Required ability

Token owner only (authenticated user's own tokens). Foreign tokens return RESOURCE_NOT_FOUND to prevent existence leaks.

Input schema

{
  "type": "object",
  "required": ["token_id"],
  "properties": {
    "token_id": {
      "type": "string",
      "description": "UUID of the token to revoke. Must belong to the authenticated user. Cannot be the id of the token authenticating this call."
    }
  }
}

Output shape

{
  "data": {
    "token_id": "01HX...",
    "revoked": true
  }
}

Example prompts

"Revoke my 'Zapier staging' token."

"Delete token 01HX...."

Failure modes

AUTHENTICATION_REQUIRED — no authenticated user on the request.
VALIDATION_FAILED — token_id is empty, or caller tried to revoke the current session (self-revoke blocked).
RESOURCE_NOT_FOUND — token doesn't belong to the authenticated user.