Delete API token
This endpoint requires Organization Admin permissions.
Permanently delete an API token. Works for all token types — Organization API keys, Personal Access Tokens (PATs), and MCP OAuth grants. This is the same as revoking a token in the Omni app.
Concurrent deletes are safe — the first caller receives 200 and the second receives 404 consistently. An Organization Admin can delete the token they authenticated with, which is useful for self-service rotation.
Authorizations
Can be either an Organization API Key or Personal Access Token (PAT).
Include in the Authorization header as: Bearer YOUR_TOKEN
Path Parameters
UUID of the token to revoke. The token must belong to the same organization as the authenticating user.