Latest Content

How to Revoke Access for an Authorized OAuth Application

Updated on 21 July, 2026

Revoke a third-party OAuth application's access to your Vultr account, invalidating its access and refresh tokens immediately, using the Vultr REST API.

Revoking access removes a third-party OAuth application's permission to act on your Vultr account. Revocation tears down the role, trust, and policy snapshots that backed the grant, and invalidates every outstanding token the application holds, so its next API call fails immediately.

Follow this guide to revoke access for an authorized OAuth application using the Vultr Console and the Vultr API.

Note
The steps below revoke your own authorization for an application from your user account. If you own the application and want to revoke every user's tokens at once, see How to Revoke All User Authorizations for Your OAuth Application.
  • Vultr Console
  • Vultr API

Revoke an application you authorized from your user account. This affects only your own access.

  1. Log in to the Vultr Console.

  2. Click your name in the top navigation bar, then click Manage User.

  3. Click Authorized OAuth Applications.

  4. Find the application in the list, then click the delete icon in its row.

  5. In the confirmation dialog, click Revoke.

    The application is removed from the list, and its access stops working immediately.

  1. Send a GET request to the List Your Authorizations endpoint to find the authorization id.

    console 
    $ curl "https://api.vultr.com/v2/oauth/authorizations" \
    -X GET \
    -H "Authorization: Bearer ${VULTR_API_KEY}"

    The response contains an authorizations array. Note the id of the authorization you want to revoke. This is the authorization id, not the application's client_id.

  2. Send a DELETE request to the Revoke Authorization endpoint to revoke access. Replace {authorization-id} with the id from the previous step.

    console 
    $ curl "https://api.vultr.com/v2/oauth/authorizations/{authorization-id}" \
    -X DELETE \
    -H "Authorization: Bearer ${VULTR_API_KEY}"

    A successful deletion returns an HTTP 204 No Content response with no response body. The application's access tokens stop working immediately, and any refresh token it holds is revoked. If you authorize the same application again later, Vultr issues a fresh grant.

Comments