Skip to content

Apply a target revocation and revoke affected active sessions.

POST
/v1/revocations
object
tenant_id
string
environment_id
string
target
required
object
type
required
Allowed values: mcp_server tool agent user client_surface credential_binding connector
id
required
string
>= 1 characters
reason_code
required
string
/^[a-z0-9_]+$/
reason
string
<= 500 characters
correlation_id
string

Revocation applied; affected sessions are revoked without upstream calls.

object
schema_version
required
revocation_id
required
string
target
required
object
type
required
Allowed values: mcp_server tool agent user client_surface credential_binding connector
id
required
string
>= 1 characters
tenant_id
required
string
environment_id
required
string
blocks_new_calls
required
results
required
Array<object>
object
client_session_id
required
string
status
required
Allowed values: succeeded failed
previous_state
required
One of:
string
Allowed values: pending active reconnecting draining terminated revoked expired failed
next_state
required
One of:
string
Allowed values: pending active reconnecting draining terminated revoked expired failed
reason_code
required
string
/^[a-z0-9_]+$/
error_reason
required
string | null
backend_session_ids
required
Array<string>
audit_event_ids
required
Array<string>

Caller lacks revocation.create.

Type set in Geist, Source Serif 4, and Departure Mono.