---
title: "Invalidate all sessions except the caller's"
method: DELETE
path: "/api/v1/maintenance/_sessions"
tags: ["Maintenance"]
---

# Invalidate all sessions except the caller's

`DELETE /api/v1/maintenance/_sessions`

Walks every active HTTP session tracked by SessionMonitor, skips the caller's own session, and invalidates the rest. Returns the count of invalidated sessions.

## Response `200`

Sessions invalidated

- ResponseEntityKillSessionsResultView
  - `errors` ErrorEntity[]
    - `errorCode` string
    - `message` string
    - `fieldName` string
  - `entity` KillSessionsResultView
    - `killedCount` integer, required — Number of sessions invalidated (the caller's own session is always skipped).
  - `messages` MessageEntity[]
    - `message` string
  - `i18nMessagesMap` object
  - `permissions` string[]
  - `pagination` Pagination
    - `currentPage` integer
    - `perPage` integer
    - `totalEntries` integer

## Other responses

- `401` — Unauthorized - authentication required
- `403` — Forbidden - CMS Administrator role required

---

[API](https://skmtc.dev/jostens/apis/dotcms-rest-api.md) · [All operations](https://skmtc.dev/jostens/apis/dotcms-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/jostens/dotcms-rest-api/revisions/a088fe9f515c/schema)