Api tokensProject api tokens
Revoke a Project API Token
Revoke a project token you no longer trust or need.
Goal
Stop token authentication for that project immediately.
Revoking a token is permanent. A revoked token cannot be restored.
What you need
- The project API token you want to revoke
- Confirmation that the token is no longer needed, because revocation is permanent
To revoke it:
- Open the target project
- Open
API TokensandVIEW ALL - Select the token to revoke
- Click
REVOKEand confirm
Using Devopness MCP
Try these prompts in Devopness MCP:
- "In organization
acme-inc, projectacme-platform, revoke theci-pipelineproject API token." - "In organization
acme-inc, projectacme-platform, revoke the project API token that was exposed."
Verify
- The token stops authenticating requests
- The list updates with a revoked status
Common issues
- You cannot revoke the token: confirm your permissions in the project
- A revoked token still appears active: refresh the list
What to do next
- Add a Project API Token to replace a revoked token