---
title: "Session and deletion controls"
method: POST
path: "/api/auth/account/{action}"
---

# Session and deletion controls

`POST /api/auth/account/{action}`

## Request

- Base URL: `https://disban.io`
- URL: `https://disban.io/api/auth/account/{action}`
- Auth: API key in cookie `disban_session`

Requires a browser session and a fresh action-bound email code requested with intent account. Sign-out-all invalidates every browser session; API keys remain active. Delete-history preserves monthly usage. Delete-account removes the active account, sessions, keys, usage and activity; it does not rewrite independently collected domain intelligence or existing backups.

## Path parameters

- `action` 'sign-out-all' | 'delete-history' | 'delete-account', required

## Request body

- object
  - `challenge_id` string, required
  - `code` string, required
  - `confirmation` 'DELETE': Required for both deletion actions.

## Response `200`

Account action completed

- object

## Other responses

- `400`: Request could not be completed
- `401`: Request could not be completed
- `403`: Request could not be completed
- `409`: Request could not be completed
- `413`: Request could not be completed
- `415`: Request could not be completed
- `429`: Rate or quota limit; honor Retry-After
- `502`: Request could not be completed
- `503`: Request could not be completed

---

[API](https://skmtc.dev/disban/apis/disban-api.md) · [All operations](https://skmtc.dev/disban/apis/disban-api/llms.txt) · [OpenAPI document](https://skmtc.dev/disban/apis/disban-api/revisions/1becfdd524a2?raw)