/oauth/revoke

Revoke a refresh token (RFC 7009) — 'Disconnect'

Revokes the presented refresh token and its whole rotation family. Always returns 200 per RFC 7009.

free

Parameters

Name	In	Required	Default	Allowed	Description	Example
token	body	required	—	—	The refresh token to revoke.	<refresh token>

Response schema

Field	Type	Nullable	Description
(empty body)	none	no	HTTP 200 with an EMPTY body, always (RFC 7009) — the endpoint never reveals whether the token existed or was owned by the caller (no oracle). If the token and its client match a live rotation family, that family is revoked; otherwise the call is a no-op. There is no JSON response payload.

Errors

Status	Label	Description
200	OK	Request succeeded.
400	Bad Request	Invalid query, body, or path parameter.
401	Unauthorized	Missing or invalid Authorization header / api_Token.
402	Payment Required	Insufficient token balance for this call. Top up
429	Too Many Requests	Rate limit exceeded for your tier (see /pricing for tier limits). Tier limits
500	Server Error	Unexpected server-side failure. Retry with backoff; report if persistent.

Code samples

Reveal credentials

curl -X POST "https://api.finradar.ai/oauth/revoke" \
  -H "Authorization: Bearer YOUR_JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
  "token": "<refresh token>"
}'

Generate an API key in /account/credentials to run live queries (literal YOUR_API_KEY placeholder shown until then).