Skip to main content

revokeOrgToken

Permanently deactivates an org token so it can no longer authenticate. With endSessions: true it also signs out every managed player session the token signed in (their app tokens, realtime and ck-exec connections end now); without it those sessions run until they lapse. Requires the 'manage_tokens' permission on the token's org (super admins bypass). DESTRUCTIVE and irreversible; the secret cannot be reactivated. Returns false if the token does not exist.

revokeOrgToken(
  orgTokenId: BigInt!
  idempotencyKey: String
  endSessions: Boolean
): Boolean!

Arguments​

revokeOrgToken.orgTokenId ● BigInt! non-null scalar​

Org token id (BigInt as string).

revokeOrgToken.idempotencyKey ● String scalar​

Optional idempotency key. Recommended for retries: replaying with the same key and identical arguments returns the first result instead of re-applying; the same key with different arguments returns IDEMPOTENCY_CONFLICT. Keys expire after 24h.

revokeOrgToken.endSessions ● Boolean scalar​

Also end every managed player session this token signed in. Default false.

Type​

Boolean scalar​

The Boolean scalar type represents true or false.