How long do refresh tokens stay valid, and can they be revoked?

Sources

1Token lifetimes2Revoking sessions3Rotation settings

Answer · checked claim by claim

Refresh tokens are valid for 30 days.¹

Admins can revoke every token for a user at once.²“An administrator can revoke all active sessions and refresh tokens for a user from Security settings.”admin/security.md §1

Tokens rotate on every request. Removed: rotation is opt-in³

2 supported1 removedChecked before the answer was shown

DocVerify

Answers from your documentation, with proof.

Status: Open source. Web and terminal

Answers questions from a set of documents, then checks every individual claim in the answer against those documents before showing it. It also flags where the docs themselves drift.

Role: Built solo
Status: Code is public on GitHub.
Built with: Python
LangGraph
DeBERTa NLI
RAGAS
Docker

View on GitHub

Why it exists

An AI answer that sounds right is worse than no answer when nobody can check it. DocVerify shows its work claim by claim.

What it does

Claim-level verification with term grounding, a DeBERTa NLI model and RAGAS scoring.
Corrects documentation drift over time and writes an audit report.

How it’s built

Deterministic checks run first; models run second.
Packaged with Docker.