---
title: "Delete Customer Token"
description: "Permanently revokes a customer-scoped API token. Users can only delete tokens within their customer scope."
---

`DELETE /api/customer/tokens/:id`

## Example (cURL)

```bash
curl -X DELETE "$BASE_URL/api/customer/tokens/2" \
  -H "Cookie: $SESSION_COOKIE"
```

## Response

```json
{ "success": true }
```

## Common errors

- `403 Forbidden` when the token is outside your customer scope, or when the token is org-scoped (no `customerId`)
- `404 Token not found` when the token doesn't exist or belongs to another org