Revoke an API token.

Read as Markdown

DELETE /api/v1/tokens/{tokenId}

Revoke an API token.

Access

Use a credential with the authentication scheme documented in the API contract.

Provider access, workspace membership, and agent grants are enforced separately. A token does not expand access to a repository or resource. Set up developer access.

Parameters

Name	Location	Type	Required	Description
tokenId	path	string	Yes	API token id.

Call the endpoint

Replace path placeholders and your credential. For body operations, create request.json using the required fields above; this command does not invent resource identifiers or consent.

curl --request DELETE \
  'https://commentary.dev/api/v1/tokens/<tokenId>' \
  --header 'Authorization: Bearer <your-token>'

Responses

Status	Meaning	Payload
200	Successful response.	object
400	The request was invalid.	ExternalError
401	Authentication is required.	ExternalError
403	The token or session does not have permission for this resource.	ExternalError
404	The resource was not found.	ExternalError
429	The request was rate limited.	ExternalError

Successful response fields

Field	Type	Required	Description
ok	true	Yes
id	string	Yes

Recover from errors

Use the returned status and error body. Correct invalid fields before retrying; reconnect or narrow the target for authentication and permission errors. For conditional writes, reload the latest version before preparing a new request. Respect rate-limit headers and retry only when the operation’s idempotency contract permits it.

Contract and related guidance

Operation ID: revokeApiToken. Download the OpenAPI contract for complete constraints and code generation. Browse endpoints.