> ## Documentation Index
> Fetch the complete documentation index at: https://www.truefoundry.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Revoke all auth tokens on an MCP server

> Deletes every per-subject auth record on the MCP server — OAuth tokens and auth overrides — and bumps the server auth revision so cached auth data is invalidated. Idempotent: returns `deletedCount: 0` when no records exist. Permissions: tenant admins only.



## OpenAPI

````yaml /openapi.json delete /api/svc/v1/mcp/{mcpServerId}/auth/tokens
openapi: 3.1.0
info:
  title: TrueFoundry API
  description: API for TrueFoundry
  version: 0.1.0
  contact: {}
servers:
  - url: https://{controlPlaneURL}
    variables:
      controlPlaneURL:
        default: app.truefoundry.com
        description: Control Plane URL
security: []
tags:
  - name: Agent
  - name: Agent Skills
  - name: Applications
  - name: Metrics
  - name: Apply
  - name: Artifacts
  - name: Audit Logs
  - name: Clusters
  - name: Jobs
  - name: LLM Gateway Budgets
  - name: Logs
  - name: MCP Registry
  - name: MCP Servers V2
  - name: MLRepos
  - name: Model Deployments
  - name: Models
  - name: Personal Access Tokens
  - name: Prompts
  - name: Provider Integrations
  - name: SCIM v2
  - name: Secret Groups
  - name: Secrets
  - name: Teams
  - name: Traces
  - name: Users
  - name: Virtual Accounts
  - name: Role Bindings
  - name: Workspaces
  - name: Provider Accounts
paths:
  /api/svc/v1/mcp/{mcpServerId}/auth/tokens:
    delete:
      tags:
        - MCP Servers V2
        - public
      summary: Revoke all auth tokens on an MCP server
      description: >-
        Deletes every per-subject auth record on the MCP server — OAuth tokens
        and auth overrides — and bumps the server auth revision so cached auth
        data is invalidated. Idempotent: returns `deletedCount: 0` when no
        records exist. Permissions: tenant admins only.
      operationId: MCPServerV2.revokeAllAuthTokens
      parameters:
        - name: mcpServerId
          required: true
          in: path
          description: MCP server id (the `id` returned by `GET /v1/mcp`, not the `name`).
          schema:
            example: mcp-01HXYZ...
            type: string
      responses:
        '200':
          description: All auth tokens revoked.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RevokeAllAuthTokensResponse'
        '403':
          description: Caller is not a tenant admin.
        '404':
          description: MCP server not found.
      security:
        - jwt: []
components:
  schemas:
    RevokeAllAuthTokensResponse:
      type: object
      properties:
        deletedCount:
          type: number
          description: >-
            Number of per-subject auth records (OAuth tokens and auth overrides)
            deleted from the MCP server.
      required:
        - deletedCount
      title: RevokeAllAuthTokensResponse
      x-fern-type-name: RevokeAllAuthTokensResponse
  securitySchemes:
    jwt:
      type: http
      scheme: bearer
      bearerFormat: JWT

````