Skip to content

Revoke a Personal Access Token

Revoke a human-owned API key by credential id when it is obsolete, leaked, or no longer appropriate for the workflow.

Best for Human member and CLI user Updated April 3, 2026
API In this interface
4 steps Steps
3 interfaces Available in
Use this path when

The revoke endpoint deletes the PAT by credential id for the current human principal.

What you'll finish here
  • Find the right credential id first.
  • Use the correct revoke surface.
  • Confirm the key should no longer be used anywhere.

Where this happens

LabelValueNotes
EndpointDELETE /api/v1/personal-access-tokens/{credentialId}Revokes one PAT.

Same Task, Other Interfaces

Use the version that matches where you are working now. The subject matter stays the same; the delivery changes by surface.

Do the work

  1. 1. List the current PATs first if you do not already know the credential id.
  2. 2. Send the revoke request using the credential id in the path.
  3. 3. Wait for the success response.
  4. 4. Delete the raw token anywhere it may still be stored.

Keep Going in Sessions and Personal Tokens

Stay in the same interface and move to the next closest task in this topic when needed.

Nearby Guides

These guides stay close to the current workflow so you can keep moving without restarting discovery.