🔐
AB-143

Token revocation endpoint reachable

🔐 Bot Authentication Moderate effort Est. cost: $0

What it means

Your credential security analysis confirms revocation endpoint is supported.

Why it matters

A reachable revocation endpoint lets agents and credential vaults invalidate tokens immediately upon detecting compromise.

What's wrong

credential_security: { revocationSupported: false }

What's right

credential_security: { revocationSupported: true }

Check this rule on your site

Enter your URL to check just this one rule (AB-001).

Related rules in Bot Authentication