overlane token revoke | Overlane Docs

Revoke a token that leaked or is no longer needed: the agent token stops working. The next call made with it fails with exit 3 (token_revoked). You can revoke your own tokens; a team-wide agent token can revoke any token. To revoke a token, give its token ID from overlane token list. This cannot be undone: mint a new token instead.

Usage

overlane token revoke [token-id] [--service URL] [--team TENANT_ID] [--dry-run] [--force]

Arguments

Argument	Required	Description
`token-id`	no	The token ID from `overlane token list` (required)

Flags

Flag	Type	Required	Description
`--service`	string	no	The service address (default: OVERLANE_SERVICE_URL, then the project’s binding, then the hosted service)
`--team`	string	no	The team (tenant) to act on (default: the one your token belongs to)
`--dry-run`	boolean	no	Print the requests and file changes this command would make, then stop. Needs no credentials.
`--force`	boolean	no	Confirm a destructive action when there is no terminal to ask on. Without it, exit 2.

Examples

overlane token revoke tok_abc123 --force
overlane token revoke tok_abc123 --dry-run

Behavior

Effect: destructive (deletes or reverts; needs --force without a terminal).
Needs credentials: yes. Uses the network: yes.
Supports --dry-run: yes. Accepts --force: yes.
Machine-readable description: overlane schema token revoke.

Result

With --json (the default when stdout is not a terminal) the command prints this JSON Schema’s shape on stdout.

{
  "anyOf": [
    {
      "type": "object",
      "properties": {
        "tenantId": {
          "type": "string"
        },
        "tokenId": {
          "type": "string"
        },
        "revoked": {
          "type": "boolean",
          "const": true
        }
      },
      "required": [
        "tenantId",
        "tokenId",
        "revoked"
      ],
      "additionalProperties": false
    },
    {
      "type": "object",
      "properties": {
        "dryRun": {
          "type": "boolean",
          "const": true
        },
        "service": {
          "type": "string"
        },
        "requests": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "method": {
                "type": "string"
              },
              "path": {
                "type": "string"
              },
              "body": {},
              "note": {
                "type": "string"
              }
            },
            "required": [
              "method",
              "path"
            ],
            "additionalProperties": false
          }
        },
        "commands": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "writes": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "path": {
                "type": "string"
              },
              "action": {
                "type": "string",
                "enum": [
                  "write",
                  "append",
                  "delete"
                ]
              },
              "description": {
                "type": "string"
              }
            },
            "required": [
              "path",
              "action",
              "description"
            ],
            "additionalProperties": false
          }
        },
        "notes": {
          "type": "array",
          "items": {
            "type": "string"
          }
        }
      },
      "required": [
        "dryRun",
        "requests",
        "commands",
        "writes",
        "notes"
      ],
      "additionalProperties": false
    }
  ]
}

See exit codes for the status the process returns.