---
type: api
title: Clear service account token caches
description: Evict a subset of all entries from the service account token caches.
url: https://www.elastic.co/elastic/docs-builder/docs/4641/api/doc/elasticsearch/v8/operation/operation-security-clear-cached-service-tokens
resource: https://www.elastic.co/elastic/docs-builder/docs/4641/api/doc/elasticsearch/v8/operation/operation-security-clear-cached-service-tokens
products:
  - Elasticsearch
---

# Clear service account token caches

Authentication: required

## Paths

- `POST` `/_security/service/{namespace}/{service}/credential/token/{name}/_clear_cache`

#### Path parameters

- `namespace` (string) — required
  The namespace, which is a top-level grouping of service accounts.
- `service` (string) — required
  The name of the service, which must be unique within its namespace.
- `name` (union string | string[]) — required
  A comma-separated list of token names to evict from the service account token caches.
Use a wildcard (`*`) to evict all tokens that belong to a service account.
It does not support other wildcard patterns.

## Description

Evict a subset of all entries from the service account token caches.
Two separate caches exist for service account tokens: one cache for tokens backed by the `service_tokens` file, and another for tokens backed by the `.security` index.
This API clears matching entries from both caches.

The cache for service account tokens backed by the `.security` index is cleared automatically on state changes of the security index.
The cache for tokens backed by the `service_tokens` file is cleared automatically on file changes.

[Read the reference documentation](https://www.elastic.co/guide/en/elasticsearch/reference/8.19/service-accounts.html)

## Required authorization

- Cluster privileges: `manage_security`

## Response

`application/json`

- `_nodes` (object)
  - `failures` (object[])
    - `type` (string)
      The type of error
    - `reason` (union string) — nullable
      A human-readable explanation of the error, in English.
      One of: `string`
    - `stack_trace` (string)
      The server stack trace. Present only if the `error_trace=true` parameter was sent with the request.
    - `caused_by` (object) — recursive
      Same fields as `failures` in `_nodes`
    - `root_cause` (object[]) — recursive
      Same fields as `failures` in `_nodes`
    - `suppressed` (object[]) — recursive
      Same fields as `failures` in `_nodes`
  - `total` (number)
    Total number of nodes selected by the request.
  - `successful` (number)
    Number of nodes that responded successfully to the request.
  - `failed` (number)
    Number of nodes that rejected the request or failed to respond. If this value is not 0, a reason for the rejection or failure is included in the response.
- `cluster_name` (string)
- `nodes` (map string to object)
  Map values (object)
  - `name` (string)
## Code examples

#### Console

```console
POST /_security/service/elastic/fleet-server/credential/token/token1/_clear_cache
```

#### JavaScript

```javascript
const response = await client.security.clearCachedServiceTokens({
  namespace: "elastic",
  service: "fleet-server",
  name: "token1",
});
```

#### Python

```python
resp = client.security.clear_cached_service_tokens(
    namespace="elastic",
    service="fleet-server",
    name="token1",
)
```

#### curl

```curl
curl -X POST "$ELASTICSEARCH_URL/_security/service/elastic/fleet-server/credential/token/token1/_clear_cache" \
  -H "Authorization: ApiKey $ELASTIC_API_KEY"
```

#### Java

```java
client.security().clearCachedServiceTokens(c -> c
    .name("token1")
    .namespace("elastic")
    .service("fleet-server")
);
```

#### C#

```c#
var response = await client.Security.ClearCachedServiceTokensAsync(@namespace: "elastic", service: "fleet-server", name: new[] { "token1" });
```

#### PHP

```php
$resp = $client->security()->clearCachedServiceTokens([
    "namespace" => "elastic",
    "service" => "fleet-server",
    "name" => "token1",
]);
```

#### Ruby

```ruby
response = client.security.clear_cached_service_tokens(
  namespace: "elastic",
  service: "fleet-server",
  name: "token1"
)
```

## Response examples

#### 200

`application/json`

Generated from the API spec. Values are representative. Unions use the first variant; deeply nested or large bodies may omit fields.

```json
{
  "_nodes": {
    "failures": [
      {
        "type": "string",
        "reason": "string",
        "stack_trace": "string",
        "caused_by": {
          "type": "string",
          "reason": "string",
          "stack_trace": "string",
          "caused_by": {
            "type": "string",
            "stack_trace": "string"
          },
          "root_cause": [],
          "suppressed": []
        },
        "root_cause": [
          {
            "type": "string",
            "stack_trace": "string"
          }
        ],
        "suppressed": [
          {
            "type": "string",
            "stack_trace": "string"
          }
        ]
      }
    ],
    "total": 0,
    "successful": 0,
    "failed": 0
  },
  "cluster_name": "string",
  "nodes": {
    "key": {
      "name": "string"
    }
  }
}
```