oz0 mcp clients revoke

Revokes a grant by its ID (from `oz0 mcp clients list`), or with --client every grant of that client you may revoke: your own, or everyone's when you hold keys.manage.

For: Operators and developers looking up a command.

Revokes a grant by its ID (from oz0 mcp clients list), or with --client every grant of that client you may revoke: your own, or everyone's when you hold keys.manage. The client's access and refresh tokens stop working within a few seconds on every edge; it must be approved again to connect. Each revocation is audited (mcp.client.revoked).

Usage

oz0 mcp clients revoke <grant> | --client <client ID> [--tenant T] [flags]

Flags

FlagTypeDefaultDescription
--clientstringrevoke every grant of this client ID that you may revoke
--jsonboolprint JSON instead of a table
--tenantstringdefaulttenant

Inherited flags

FlagTypeDefaultDescription
--contextstring$OZ0_CONTEXT or <config dir>/orchestrator-zero/context.jsonCLI context file written by server init
--log-levelstringinfolog level: debug, info, warn or error

See all oz0 commands and the global flags.

On this page
Copyright © 2026