open-vault/website/source/docs/http/sys-revoke-force.html.md

layout	page_title	sidebar_current	description
http	HTTP API: /sys/revoke-force	docs-http-lease-revoke-force	The `/sys/revoke-force` endpoint is used to revoke secrets or tokens based on prefix while ignoring backend errors.

/sys/revoke-force

Description

Revoke all secrets or tokens generated under a given prefix immediately. Unlike `/sys/revoke-prefix`, this path ignores backend errors encountered during revocation. This is potentially very dangerous and should only be used in specific emergency situations where errors in the backend or the connected backend service prevent normal revocation. By ignoring these errors, Vault abdicates responsibility for ensuring that the issued credentials or secrets are properly revoked and/or cleaned up. Access to this endpoint should be tightly controlled.

Method

PUT

URL

`/sys/revoke-force/`

Parameters

None

Returns

A `204` response code.