Skip to main content
POST
Revoke a bearer token

Authorizations

Authorization
string
header
required

An OAuth 2.0 bearer token, sent as Authorization: Bearer <token>. This is the recommended way to authenticate.

Get one by exchanging a service account's access key pair at POST /v1/oauth/token with grant_type=client_credentials. It is the standard client-credentials grant, so any OAuth-aware library will obtain and refresh it for you.

Tokens last an hour by default. The same access key pair is separately your AWS SigV4 credential for the S3-compatible object endpoint, which speaks nothing else.

Body

token
string
required

The access token to revoke.

token_type_hint
string

Accepted and ignored — the token identifies itself. Present because RFC 7009 clients send it.

Example:

"access_token"

Response

Processed. Carries no body and says nothing about whether the token existed.