DELETE /tokens/{tokenId}

Revoke a token by id

Revoke one of the caller's own public_api tokens by numeric id. The operation is idempotent — revoking an already-revoked owned token returns 200. To avoid disclosing which token ids exist, a token that is not found, not owned by the caller, or non-revocable (an internal sites token) all return an identical 404.

Parameters

• tokenId (path)

Responses

• 200
• 404 — Identical response for not-found / not-owned / sites-token — no existence leak.
• 403
• 401