Yandex Cloud
Search
Contact UsTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Yandex Identity and Access Management
  • Secure use of Yandex Cloud
  • Access management
  • Pricing policy
  • Role reference
    • Overview
    • create-id-token
    • create-token
      • Overview
      • list
      • revoke
    • revoke-token
    • whoami
  • Terraform reference
  • Monitoring metrics
  • Audit Trails events
  • Release notes
  1. CLI reference
  2. refresh-token
  3. revoke

yc iam refresh-token revoke

Written by
Yandex Cloud
Updated at January 27, 2026

Revoke subjects Refresh Tokens. Refresh Tokens can be revoked by refresh token, refresh token id, or a group of subject id, client id and client instance info. If none of the flags are set, all Refresh Tokens for the authenticated user will be revoked.

Command UsageCommand Usage

Syntax:

yc iam refresh-token revoke [Flags...] [Global Flags...]

FlagsFlags

Flag

Description

--async

Display information about the operation in progress, without waiting for the operation to complete.

--refresh-token-id

string

Refresh Token Id to be revoked.

--refresh-token

Use this flag if it is necessary to revoke a specific Refresh Token using the Refresh Token itself. The Refresh Token should be passed through the standard stdin.

--subject-id

string

Subject ID whose Refresh Tokens should be revoked. If the field is not specified, the current subject will be used.

--client-id

string

Client ID whose Refresh Tokens will be revoked.

--client-instance-info

string

Client Instance Info whose Refresh Tokens will be revoked.

-y, --yes

Automatic yes to prompts. Use in case of executing command without any flags.

Global FlagsGlobal Flags

Flag

Description

--profile

string

Set the custom configuration file.

--debug

Debug logging.

--debug-grpc

Debug gRPC logging. Very verbose, used for debugging connection problems.

--no-user-output

Disable printing user intended output to stderr.

--retry

int

Enable gRPC retries. By default, retries are enabled with maximum 5 attempts.
Pass 0 to disable retries. Pass any negative value for infinite retries.
Even infinite retries are capped with 2 minutes timeout.

--cloud-id

string

Set the ID of the cloud to use.

--folder-id

string

Set the ID of the folder to use.

--folder-name

string

Set the name of the folder to use (will be resolved to id).

--endpoint

string

Set the Cloud API endpoint (host:port).

--token

string

Set the OAuth token to use.

--impersonate-service-account-id

string

Set the ID of the service account to impersonate.

--no-browser

Disable opening browser for authentication.

--format

string

Set the output format: text (default), yaml, json, json-rest.

--jq

string

Query to select values from the response using jq syntax

-h, --help

Display help for the command.

  • Revoking a refresh token

Was the article helpful?

Previous
list
Next
revoke-token
© 2026 Direct Cursus Technology L.L.C.