---
title: "Log out on every device"
method: POST
path: "/auth/logout-all"
tags: ["Auth"]
---

# Log out on every device

`POST /auth/logout-all`

## Request

- Base URL: `http://localhost:38200`
- URL: `http://localhost:38200/auth/logout-all`
- Auth: API key in cookie `token`

Revokes EVERY refresh-token family for the authenticated user plus the caller's current access token, then clears this browser's cookies. Requires a live session (unlike `/auth/logout`, which is deliberately forgiving because its only job is to clear cookies).

T712: `/auth/logout` used to do this implicitly — logging out on one device signed the user out everywhere. It now ends only the calling device's session, and this endpoint is the explicit "everywhere" action.

## Response `200`

Every session ended; cookies cleared on this response.

- object
  - `message` string

## Other responses

- `401`: Missing or invalid credentials.
- `429`: Rate limit exceeded for this endpoint.

---

[API](https://skmtc.dev/contextq/apis/contextq-api.md) · [All operations](https://skmtc.dev/contextq/apis/contextq-api/llms.txt) · [OpenAPI document](https://skmtc.dev/contextq/apis/contextq-api/revisions/7afc44056a22?raw)