1--- 2layout: "docs" 3page_title: "token revoke - Command" 4sidebar_title: "<code>revoke</code>" 5sidebar_current: "docs-commands-token-revoke" 6description: |- 7 The "token revoke" revokes authentication tokens and their children. If a 8 TOKEN is not provided, the locally authenticated token is used. 9--- 10 11# token revoke 12 13The `token revoke` revokes authentication tokens and their children. If a TOKEN 14is not provided, the locally authenticated token is used. The `-mode` flag can 15be used to control the behavior of the revocation. 16 17## Examples 18 19Revoke a token and all the token's children: 20 21```text 22$ vault token revoke 96ddf4bc-d217-f3ba-f9bd-017055595017 23Success! Revoked token (if it existed) 24``` 25 26Revoke a token leaving the token's children: 27 28```text 29$ vault token revoke -mode=orphan 96ddf4bc-d217-f3ba-f9bd-017055595017 30Success! Revoked token (if it existed) 31``` 32 33Revoke a token by accessor: 34 35```text 36$ vault token revoke -accessor 9793c9b3-e04a-46f3-e7b8-748d7da248da 37Success! Revoked token (if it existed) 38``` 39 40## Usage 41 42The following flags are available in addition to the [standard set of 43flags](/docs/commands/index.html) included on all commands. 44 45- `-accessor` `(bool: false)` - Treat the argument as an accessor instead of a 46 token. 47 48- `-mode` `(string: "")` - Type of revocation to perform. If unspecified, Vault 49 will revoke the token and all of the token's children. If "orphan", Vault will 50 revoke only the token, leaving the children as orphans. If "path", tokens 51 created from the given authentication path prefix are deleted along with their 52 children. 53 54- `-self` - Perform the revocation on the currently authenticated token. 55