List all root tokens
vault list -format json auth/token/accessors | jq -r .[] | xargs -I '{}' vault token lookup -format json -accessor '{}' | jq -r 'select(.data.policies | any(. == "root"))'
List all tokens
vault list auth/token/accessors
Revoke tokens using accessor IDs
vault token revoke -accessor <accessor>