Delete a User Personal Access Token

DELETE /user-pats/{name}

Delete User Pat

cURL

curl --request DELETE \
  --url https://api.example.com/user-pats/{name} \
  --header 'Authorization: Bearer <token>'

200

{
  "message": "<string>"
}

Auth

Requires pats:delete, which every default role carries. The delete applies to the caller’s own Logto personal access tokens, keyed on the token’s subject — there is no way to revoke another member’s, not even as an org admin (unlike organization API keys). No active organization is needed: user PATs aren’t org-bound.

Response

200

{ "message": "Token deleted successfully" }

Errors

Status	Cause
404 Not Found	No token with this name in Logto for this user.

Authorizations

Authorization · string · header · required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Path Parameters

name · string · required

The PAT's name, not an id — user PATs are addressed by name and have no local database row.

Response

200

application/json

Successful Response

message · string · required