Revoke access token API Reference

DELETE

/tenants/{tenant}/registries/{name}/tokens/{id}

const url = 'https://api.kupe.cloud/api/v1/tenants/acme/registries/registry/tokens/rt-0a1b2c3d4e5f6a7b';
const options = {method: 'DELETE', headers: {Authorization: '<Authorization>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request DELETE \
  --url https://api.kupe.cloud/api/v1/tenants/acme/registries/registry/tokens/rt-0a1b2c3d4e5f6a7b \
  --header 'Authorization: <Authorization>'

Revoke an access token or login session: it is deleted, and the credential stops signing in. A client that signed in with it just before can hold a sign-in that the registry issued for up to 30 minutes. Admins can revoke any; a read-only member can revoke only a login session they created (kupe registry logout). Served even while the platform has the registry switched off.

Authorizations

BearerAuth

Parameters

Path Parameters

tenant

required

string

Tenant name

name

required

string

Registry name: always registry

required

string

Token id: rt- and 16 hex characters

Responses

204

Revoked

400

Invalid name or token id

object

code

string

error

string

field

string

message

string

severity

string

401

Missing or invalid authentication

object

code

string

error

string

field

string

message

string

severity

string

403

Admin access required (a read-only member can revoke only their own login session)

object

code

string

error

string

field

string

message

string

severity

string

404

Token not found for this registry

object

code

string

error

string

field

string

message

string

severity

string

409

The token kept changing while it was being revoked

object

code

string

error

string

field

string

message

string

severity

string

429

Rate limit exceeded

object

code

string

error

string

field

string

message

string

severity

string