At the moment, the expired API token still appears on the User API tokens dashboard.

Although the expired API token cannot be used anymore, it still shows up in

• Org Level: Security > User API tokens
• User Level: https://id.atlassian.com/manage-profile/security/api-tokens

Suggestion

Revoke the expired API Token automatically and remove it from the Security > User API tokens and user's api token page when the API token has expired.