Revocation
The principal withdrawing a mandate or consent before it expires, after which no one may act on it.
Revocation is the principal's act of withdrawing a mandate or consent before it expires, after which the agent and every party relying on it must stop acting on it. The CFPB's personal financial data rights rule requires that consumers can revoke a third party's access, and payment rules generally let a payer withdraw consent to future payments. Revocation only works if every holder of a derived token checks its status, so designs pair it with short-lived credentials.
Agent Minute explains this term on 1 December 2026.
Related terms
MandateA checkable statement of what an agent may do for a principal: which action, how much, with whom and until when.Mandate expiryThe point after which a mandate no longer authorises anything, as a fixed end time or on completion of a task.Withdrawal of consentA person's right to withdraw consent at any time, as easily as they gave it.Permission dashboardA place where a customer sees and withdraws the data-access permissions they have granted.