Skip to navigation

Invalidate an API token

Beta

Invalidates an API token that should no longer be used, most importantly one that has been leaked or breached, or a stale or orphaned one found through the list of API tokens. It stops authenticating right away and cannot be restored, and its secret is dropped. The token stays listed as invalidated, with who invalidated it and why. Invalidating a token that is already inactive or expired leaves it unchanged.

Token scopes: tokens:write

Beta: this version requires the X-Beta: true request header and its contract may change before it is promoted to stable. It is scheduled to become stable on 2027-02-05.

Authentication

AuthorizationBearer

Authentication

The Deel API uses bearer tokens to authenticate requests. All API calls must be made over HTTPS — calls over plain HTTP or without authentication will fail.

curl -X GET 'https://api.letsdeel.com/rest/v2/contracts' \
  -H 'Authorization: Bearer YOUR-TOKEN-HERE'

Learn more about authentication

OR
AuthorizationBearer

Standard OAuth2 security scheme based on https://swagger.io/docs/specification/authentication/

Path parameters

token_idstringRequiredformat: "uuid"
Unique identifier of the API token.

Headers

X-BetaenumRequiredDefaults to true

Opts in to the beta version of this endpoint. Must be true.

Allowed values:

Request

This endpoint expects an object.
dataobjectOptional
Details of the invalidation.

Response

The API token is invalidated.
dataobject

Errors

400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error
404
Not Found Error
429
Too Many Requests Error
500
Internal Server Error