Revocation should target the access path you intend to remove. An assistant’s OAuth connection, a workspace token, workspace membership, and an upstream advertiser API key are separate controls. Removing one does not imply that all others have been removed.
Identify the connection
Open MCP connections in the relevant Advarde workspace. Locate the assistant authorization or token by its name and owner. Confirm the workspace before revoking it, particularly when you manage several clients.
Record which integration uses the credential without copying its secret value into a ticket. If the credential is exposed, treat rotation or revocation as an immediate access change and update the dependent integration through its secret configuration.
Revoke and verify
Use the revocation control for the selected connection or token. New requests through that access path should stop succeeding. Verify with a harmless read from the affected client rather than a campaign mutation.
For broader incidents or offboarding, the workspace settings include a control to revoke workspace MCP access. Review its scope carefully because it affects more than one client connection.
Review membership and upstream credentials
If a person should no longer have workspace access, remove the relevant membership as well. If an advertiser API credential should no longer work outside Advarde, revoke or rotate it in the advertiser service.
Keep the client’s remaining authorized operator informed through your normal process. The aim is to remove obsolete access while preserving the intended owner’s ability to manage the account.
Check active advertising and automation separately
Revoking an assistant does not automatically pause existing campaigns. Review live delivery if spending should stop. Also inspect active automation policies and schedules that may have been approved separately.
Stopping future automation is distinct from pausing advertising. Confirm both outcomes when an offboarding or incident requires them, and preserve the activity record for the remaining account owner.