> ## Documentation Index
> Fetch the complete documentation index at: https://nevermined.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Revoke a credential (RFC 7009)

> Revoke an NVM API key or an x402 access token. Idempotent — revoking an already-revoked or unknown token succeeds. token_type_hint is advisory.



## OpenAPI

````yaml /api-reference/oauth-openapi.json post /oauth/revoke
openapi: 3.0.0
info:
  title: Nevermined Authentication API
  description: >-
    The OAuth 2.1 + RFC 8628 device-flow ceremony and standards-based discovery
    endpoints an agent or connector uses to obtain and manage a Nevermined
    credential. These endpoints are root-mounted (not under /api/v1).
  version: 1.0.0
  contact: {}
servers:
  - url: https://api.sandbox.nevermined.app
    description: Sandbox
  - url: https://api.live.nevermined.app
    description: Live
security: []
tags:
  - name: Authentication - Ceremony
    x-group: Ceremony
    description: Authorization Code (PKCE) and RFC 8628 device grant.
  - name: Authentication - Connections
    x-group: Connections
    description: AgentBindings — the consent receipts a user manages.
  - name: Authentication - Discovery
    x-group: Discovery
    description: RFC 8414 / 9728 / JWKS metadata.
paths:
  /oauth/revoke:
    post:
      tags:
        - Authentication - Connections
      summary: Revoke a credential (RFC 7009)
      description: >-
        Revoke an NVM API key or an x402 access token. Idempotent — revoking an
        already-revoked or unknown token succeeds. token_type_hint is advisory.
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RevokeRequest'
      responses:
        '200':
          description: Revoked (or already revoked / unknown)
components:
  schemas:
    RevokeRequest:
      type: object
      required:
        - token
      properties:
        token:
          type: string
          description: An NVM API key or an x402 access token.
        token_type_hint:
          type: string
          nullable: true
          description: RFC 7009 hint — advisory only.

````

## Related topics

- [Device Flow (RFC 8628)](/docs/integrate/authentication/device-flow.md)
- [Connected Agents](/docs/integrate/authentication/connections.md)
- [Revoke an AgentBinding by id](/docs/api-reference/authentication--connections/revoke-an-agentbinding-by-id.md)
- [Exchange a code, device_code, or refresh_token for a credential](/docs/api-reference/authentication--ceremony/exchange-a-code-device_code-or-refresh_token-for-a-credential.md)
- [RFC 8628 device authorization request](/docs/api-reference/authentication--ceremony/rfc-8628-device-authorization-request.md)