Revoke the access token you send with the request. Any later call with that token returns 401. Use it when a user signs out of your app, or when a token may have been exposed.

This revokes the access token only. A refresh token issued with it through Step 3 stays valid until it expires (30 days) and can still get a new access token. To end the session completely, delete the refresh token on your side as well.

Prerequisites: the bearer token you want to revoke.

Authentication: Partner or Account token. Only the token in the Authorization header is revoked; you can't revoke another token with this call.

Rate limit: none.