1---
2layout: "docs"
3page_title: "token revoke - Command"
4sidebar_title: "<code>revoke</code>"
5sidebar_current: "docs-commands-token-revoke"
6description: |-
7  The "token revoke" revokes authentication tokens and their children. If a
8  TOKEN is not provided, the locally authenticated token is used.
9---
10
11# token revoke
12
13The `token revoke` revokes authentication tokens and their children. If a TOKEN
14is not provided, the locally authenticated token is used. The `-mode` flag can
15be used to control the behavior of the revocation.
16
17## Examples
18
19Revoke a token and all the token's children:
20
21```text
22$ vault token revoke 96ddf4bc-d217-f3ba-f9bd-017055595017
23Success! Revoked token (if it existed)
24```
25
26Revoke a token leaving the token's children:
27
28```text
29$ vault token revoke -mode=orphan 96ddf4bc-d217-f3ba-f9bd-017055595017
30Success! Revoked token (if it existed)
31```
32
33Revoke a token by accessor:
34
35```text
36$ vault token revoke -accessor 9793c9b3-e04a-46f3-e7b8-748d7da248da
37Success! Revoked token (if it existed)
38```
39
40## Usage
41
42The following flags are available in addition to the [standard set of
43flags](/docs/commands/index.html) included on all commands.
44
45- `-accessor` `(bool: false)` - Treat the argument as an accessor instead of a
46  token.
47
48- `-mode` `(string: "")` - Type of revocation to perform. If unspecified, Vault
49  will revoke the token and all of the token's children. If "orphan", Vault will
50  revoke only the token, leaving the children as orphans. If "path", tokens
51  created from the given authentication path prefix are deleted along with their
52  children.
53
54- `-self` -  Perform the revocation on the currently authenticated token.
55