> ## Documentation Index
> Fetch the complete documentation index at: https://opentrain.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Revoke Token by ID

> Revoke a personal API token — it stops working immediately and irreversibly.

Revokes one personal API token by ID. The token stops authenticating **immediately** and revocation is irreversible — to restore access, [create](/docs/developers/api-reference/tokens/create) a new token. Find the `tokenId` via [`GET /tokens`](/docs/developers/api-reference/tokens/list).

<Warning>
  Revoking the token you are currently authenticating with breaks every subsequent call you make with it — revoke your own token only as the final step of a rotation.
</Warning>

Tokens belonging to another account return `404` — the API never confirms the existence of a token the caller does not own. To revoke by presenting the token itself instead of its ID (RFC 7009), use [`POST /api/agent/identity/revoke`](/docs/developers/api-reference/agent-auth/revoke).

**Requirements:** any valid token — token management needs no specific scope or feature flag, and works pre-claim.

## Request

<ParamField path="tokenId" type="string" required>
  The token ID (not the `ot_pat_` secret) from [`GET /tokens`](/docs/developers/api-reference/tokens/list).
</ParamField>

## Response

<ResponseField name="token" type="object">
  The revoked token record — same shape as the entries in [`GET /tokens`](/docs/developers/api-reference/tokens/list), now with `status: "revoked"` and `revokedAt` set.
</ResponseField>

## Errors

| Status | `code`         | Meaning                                                                |
| ------ | -------------- | ---------------------------------------------------------------------- |
| `401`  | `UNAUTHORIZED` | Missing or invalid token                                               |
| `404`  | `NOT_FOUND`    | No such token, or it belongs to another account (`details: {tokenId}`) |

<RequestExample>
  ```bash curl theme={null}
  curl -sS -X DELETE https://app.opentrain.ai/api/public/v1/tokens/<TOKEN_ID> \
    -H "Authorization: Bearer $OT_API_TOKEN"
  ```

  ```bash CLI theme={null}
  opentrain tokens revoke --token-id <TOKEN_ID> --json
  ```

  ```json MCP: opentrain_revoke_token theme={null}
  {
    "tokenId": "<TOKEN_ID>"
  }
  ```
</RequestExample>

<ResponseExample>
  ```json 200 theme={null}
  {
    "token": {
      "id": "<TOKEN_ID>",
      "name": "Old CI token",
      "preview": "ot_pat_91ab********77e2",
      "scopes": ["jobs:read"],
      "status": "revoked",
      "organizationId": null,
      "createdAt": "2026-05-27T18:30:46.565Z",
      "lastUsedAt": "2026-06-01T09:15:00.000Z",
      "expiresAt": null,
      "revokedAt": "2026-06-12T10:00:00.000Z"
    }
  }
  ```

  ```json 404 theme={null}
  {
    "error": "Token not found",
    "code": "NOT_FOUND",
    "requestId": "<REQUEST_ID>",
    "details": {
      "tokenId": "<TOKEN_ID>"
    }
  }
  ```
</ResponseExample>