---
title: "Audited emergency task mass-action (break-glass)"
method: POST
path: "/api/rightos/admin/break-glass"
tags: ["admin"]
---

# Audited emergency task mass-action (break-glass)

`POST /api/rightos/admin/break-glass`

## Request

- Base URL: `https://rightos.i-s3.com`
- URL: `https://rightos.i-s3.com/api/rightos/admin/break-glass`
- Auth: API key in cookie `rightos-admin-session`

Admin-only L3 control. Cancels or fails open RightFlow tasks for an organization and may optionally cancel open RightOS tokens. Immediate physical safety remains the execution system's responsibility; this endpoint reconciles coordination/rights state afterward (ADR-0028).

## Request body

- object
  - `organizationId` string, required
  - `reason` string, required
  - `taskAction` 'cancel' | 'fail'
  - `cancelOpenRights` boolean: If true, also cancel issued/verified RightOS tokens for the organization
  - `source` string: Optional audit source label

## Response `201`

Break-glass applied

- object

## Other responses

- `400`: Invalid request
- `401`: Unauthorized (no admin session / cron key)

---

[API](https://skmtc.dev/i-s3/apis/rightos-right-api.md) · [All operations](https://skmtc.dev/i-s3/apis/rightos-right-api/llms.txt) · [OpenAPI document](https://skmtc.dev/i-s3/apis/rightos-right-api/revisions/10020536e345?raw)