---
title: "Suspend an organization: it immediately loses session/API/MCP/OAuth access and cannot deploy"
method: POST
path: "/operator/organizations/{organizationId}/suspend"
tags: ["Operator"]
---

# Suspend an organization: it immediately loses session/API/MCP/OAuth access and cannot deploy

`POST /operator/organizations/{organizationId}/suspend`

## Request

- Base URL: `https://hostingsurge.com/api/v1`
- URL: `https://hostingsurge.com/api/v1/operator/organizations/{organizationId}/suspend`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `__Host-hs_session`

## Path parameters

- `organizationId` string, uuid, required

## Request body

- object
  - `reason` string, required: required: shown in the audit log verbatim

## Response `200`

Suspended

- object
  - `status` 'ok', required
  - `replay` boolean: true when the target was already in the requested state

## Other responses

- `400`: Invalid request (code invalid_request)
- `403`: An action on an operator-console session older than 5 minutes (code forbidden, details.reauthenticate: sign in again at /admin/login), or an operator removed since the session was resolved
- `404`: Not found (code not_found); also the answer to any request without a live operator-console session (no admin cookie, a dashboard session, an API/MCP key or OAuth token, or a caller who is not a platform operator)
- `429`: Too many requests (code rate_limited); see Retry-After
- `501`: Not available on this server (code not_configured)

---

[API](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api.md) · [All operations](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/revisions/4d08337cdff1?raw)