Skip to navigation
Runtype APIAgents

Revoke an agent credential

Revoke a key or secret. The next token request that uses it fails; tokens already issued expire within 300 seconds.

Authentication

AuthorizationBearer
API key or Clerk session token

Path parameters

idstringRequired
Agent ID
credentialIdstringRequired

Response

The revoked credential
agentIdstring
algorithmstring or null
The pinned signing algorithm of a public key.
createdAtstring
createdByUserIdstring or null

Who registered it; provenance only.

expiresAtstring or null
idstring
kidstring

Key ID; for a client secret, a generated identifier.

kindenum
Allowed values:
publicJwkmap from strings to any or null
The registered public JWK.
revokedAtstring or null
secretHintstring or null
The last four characters of a client secret.
statusenum
Allowed values:

Errors

400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error
404
Not Found Error