@User the access_token refers to a token we create for session management. It's a JWT that is used to verify an active session for each request. The faunadb token is stored "within" the session and can be accessed after session verification. So in order to revoke a faunadb token, you simply need to revoke the supertokens' session. That would delete the faunadb token from your server / frontend as well. Info about revoking a supertokens session can be found here: https://test.supertokens.io/docs/thirdpartyemailpassword/common-customizations/sessions/revoke-session Also, for the apiKey query that you had, please have a look at https://supertokens.io/docs/community/supertokens-core/saas-setup#connecting-the-backend-sdk-with-supertokens