---
title: Revoke the calling CLI token (logout)
description: "Authenticated by the cli_token bearer being revoked (wbl_user_* / wbl_ephem_user_*)."
api_method: POST
api_path: "/v1/auth/cli/revoke"
canonical_url: https://wiblo.app/docs/developers/api/cli/revoke-cli-token
last_updated: 2026-07-28T17:12:38+02:00
md_url: https://wiblo.app/docs/developers/api/cli/revoke-cli-token.md
---

# Revoke the calling CLI token (logout)

`POST /v1/auth/cli/revoke`

Authenticated by the `cli_token` bearer being revoked (`wbl_user_*` / `wbl_ephem_user_*`). Sets `revoked_at` on the resolved token; subsequent requests with it return 401. An `api_key` bearer is rejected with `INSUFFICIENT_PRIVILEGE`. Per-identity rate-limited at 30/60s.

## Request

**curl**

```bash
curl https://api.wiblo.app/v1/auth/cli/revoke \
  -X POST \
  -H "Authorization: Bearer $WIBLO_TOKEN"
```

**TypeScript**

```ts
import { createSdk, revokeCliToken } from "@workspace/sdk"

const sdk = createSdk({ baseUrl: "https://api.wiblo.app" })

const { data, error } = await revokeCliToken({
  client: sdk,
})
```

## Responses

**`204`** — The calling CLI token is revoked.

**`401`** — No valid `cli_token` bearer was present (`INVALID_TOKEN`). Returns `ApiErrorEnvelope`.

**`403`** — An `api_key` bearer cannot revoke a CLI session (`INSUFFICIENT_PRIVILEGE`). Returns `ApiErrorEnvelope`.

**`429`** — Rate limit exceeded. The body's `error.code` is `RATE_LIMITED` and `error.details.retry_after` is the same number of seconds as the `Retry-After` header. Returns `ApiErrorEnvelope`.