access_token in the path parameter. We have introduced new endpoints that allow you to securely manage tokens for OAuth Apps by moving access_token to the request body. For more information, see the blog post.client_id and client_secret as the username and password.curl --location --request DELETE 'https://api.github.com/applications//tokens/'{}