## Log out and revoke refresh token

**post** `/auth/logout`

Revokes the caller's refresh token server-side. For OAuth Bearer
callers, include the refresh token in the request body — it is held
client-side and cannot be derived from the access token. Callers
without a refresh token to revoke may post an
empty body to clear server-side session state best-effort.

Returns 204 No Content on success. The caller is still responsible
for dropping any locally-cached credentials.

### Body Parameters

- `refresh_token: optional string`

  The OAuth refresh token to revoke. Omit for sessions without a refresh token.

### Example

```http
curl https://console.cloud.tigerdata.com/public/api/v1/auth/logout \
    -X POST \
    -H "Authorization: Bearer $TIGER_CLOUD_API_KEY"
```