Revoke a token

Revoking a token is immediate and cannot be undone.

API token revoke action

Revoke flow#

1. Open API Tokens

   Go to Settings → API Tokens.

2. Find the token

   Use the name, prefix, workspace, expiry, and last-used columns to identify it.

3. Click Revoke

   Confirm the warning. External clients using the token stop working immediately.

When to revoke#

• The token leaked.
• The external client was decommissioned.
• You need different scopes.
• A teammate or vendor no longer needs access.
• The token belongs to the wrong workspace context.

After revoking#

If the automation still needs access, create a new token and update the external client configuration.