> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getkato.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Revoke an OAuth grant

> Revoke the grant associated with an OAuth access or current refresh token.

`POST https://api.getkato.io/oauth/revoke`

Revoke the grant associated with an OAuth access or current refresh token.

See [OAuth flow and credentials](/api-reference/oauth/overview) for client registration, authorization, and token rotation.

Accepts JSON or application/x-www-form-urlencoded. No bearer Authorization header is needed. A recognized token revokes the grant and all associated access keys. Empty or unknown tokens still return success without revealing whether a grant exists.

## Parameters

<ParamField body="token" type="string">
  An access token or current refresh token for the grant.
</ParamField>

## Response

**200** — An empty response body with status 200. Do not attempt to parse it as JSON.

```bash Request theme={null}
curl --fail-with-body --silent --show-error \
  "https://api.getkato.io/oauth/revoke" \
  -H "Content-Type: application/json" \
  --data '{
  "token": "REPLACE_WITH_TOKEN_TO_REVOKE"
}'
```

## Compatibility alias

`POST /oauth/raycast/revoke` calls the same handler. Use `/oauth/revoke` for new clients.


## Related topics

- [OAuth authorization](/api-reference/oauth/overview.md)
- [All endpoints](/api-reference/endpoints.md)
- [Exchange or refresh tokens](/api-reference/oauth/token.md)
- [Authorize a workspace grant](/api-reference/oauth/authorize.md)
- [Authentication and API conventions](/api-reference/authentication.md)