Skip to content
Docs

Revoke Installation Credential

POSThttps://api.vercel.com/v1/installations/{integrationConfigurationId}/credentials/revoke
Retires a superseded installation credential, so a partner can complete a rotation it started with POST /credentials/rotate — the leaked credential stops working without the customer having to reinstall. Authenticated by a live installation credential plus the integration's client secret. The credential to retire is named in the body rather than being the one that authenticates, so the ordinary flow is: rotate, store the replacement, then authenticate with the replacement and revoke the old one. Refuses to retire an installation's last live credential. Rotation exists so remediation is not customer-visible; revoking the only credential would undo that and leave the install needing a reinstall.
https://api.vercel.com/v1/installations/{integrationConfigurationId}/credentials/revoke
const response = await fetch('https://api.vercel.com/v1/installations/integrationConfigurationId/credentials/revoke', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer YOUR_ACCESS_TOKEN',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "token": "string",
    "client_secret": "string",
    "client_id": "example_id"
  }),
});


const data = await response.json();
console.log(data);
Response
{
  "already_revoked": "false",
  "revoked": "false"
}

Authentication

AuthorizationbearerToken

Default authentication mechanism

Path parameters

integrationConfigurationIdstringRequired

Request

This endpoint expects an object.

tokenstringRequired
client_secretstringRequired
client_idstringOptional

Response

200Success
already_revokedbooleanRequired
revokedbooleanRequired

Errors

400One of the provided values in the request body is invalid. One of the provided values in the request query is invalid.
401The request is not authorized.
403You do not have permission to access this resource.
404Error
409Error
410Error
Revoke Installation Credential | Vercel API