Not any more than any other public endpoint service exposes. This revocation endpoint can be protected by auth too. Use API key that you're revoking in auth.

▲

orf 2 hours ago | parent [-]

How does that make any sense?

	▲	flaunf221 2 hours ago \| parent [-]
		I see now from another comment you thought about denial of service for service that leaked key. And I thought about mass leak resulting in DDOS onto API provider. Wrong guess from me.