Skip to main content
Glama

Revoke API Token

revoke_api_token
Destructive

Revoke an API token by NAME, permanently disabling every client authenticating with it. This is IRREVERSIBLE — a revoked token cannot be restored, only replaced with a new one from create_api_token — and REQUIRES CONFIRMATION: list the tokens first, then call again with confirm set to the exact token name, and only after the user has explicitly agreed. Fails without revoking anything when the name matches no token (TOKEN_NOT_FOUND), matches several (TOKEN_AMBIGUOUS), or the confirmation does not match. dryRun: true previews it first — the token's privileges, when it was last used, and whether it is the token this very connection runs on — without revoking anything or needing confirm. Before writing app code that consumes this, call get_integration_guide with topic=team and the framework the app uses.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
appNoId of the Bridge app to act on for this call (see list_apps). Omit to use the current app.
nameYesToken NAME from list_api_tokens.
dryRunNotrue previews what the deletion would affect and deletes nothing — no confirm needed. Do this first and show the user the result. Needs the same privilege as the deletion itself.
confirmNoRepeat the exact key of the resource being deleted, as confirmation. Required to delete; not needed with dryRun. This is a deliberate safety step — do NOT guess it or copy it from a fuzzy match. If you are not certain, list the resources first and ask the user which one they mean.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare destructiveHint=true, but the description goes well beyond them: irreversibility ('cannot be restored, only replaced'), the mandatory confirmation protocol, the specific failure modes (TOKEN_NOT_FOUND, TOKEN_AMBIGUOUS, mismatched confirmation) with the guarantee nothing is revoked, and that dryRun needs the same privilege as the deletion.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the irreversible warning and confirmation requirement in the first two sentences, and information-dense throughout. It runs long, and the trailing get_integration_guide instruction is arguably tangential to the revoke action, keeping it just short of a 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive tool with no output schema, the description supplies everything needed: safety protocol, irreversibility, failure semantics, preview behavior, and named sibling prerequisites. An agent can invoke it correctly on the first try without further exploration.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, and the description earns an extra point by making the interplay explicit: confirm must equal the exact token name and is not needed with dryRun, and dryRun reveals privileges, last use, and whether the token backs the current connection. It adds workflow meaning rather than just restating parameter docs.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Revoke an API token by NAME') plus the scope of impact ('permanently disabling every client authenticating with it'). It names the counterpart sibling create_api_token and the prerequisite sibling list_api_tokens, so an agent can place it precisely among the many delete/remove siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit ordered workflow: list the tokens first, then call with confirm set to the exact token name, and only after the user has explicitly agreed. It also states when to use dryRun (preview first) and when to call get_integration_guide, covering both alternatives and preconditions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.