revoke_token
Revoke a service token by id. Future key fetches by that token stop immediately, so any workload still using it loses access on its next read. If the holder may have cached the key already, also rotate the environment on the local crypto plane — revocation alone does not re-encrypt anything. Find the id with list_tokens. Returns { ok, tokenId }.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| org | No | Organization slug or id. Omit it when the credential can reach exactly one org — that org is used automatically. With several, the error names every slug you may pass; list them yourself with list_orgs. | |
| tokenId | Yes | The token's id from list_tokens — not the token string, which is never stored. |