---
title: "Revoke Company Sessions"
method: POST
path: "/internal/company/revoke-sessions"
tags: ["internal"]
---

# Revoke Company Sessions

`POST /internal/company/revoke-sessions`

Revoke every active SuperTokens session for a company's users.

Used at the WorkOS cutover: WorkOS sessions live client-side and are
unaffected, but a SuperTokens session survives a `login_provider_type`
flip for up to the refresh-token lifetime (~6 days idle). Revoking forces
the company's users back through /auth, where the email-first router sends
them to their newly-assigned provider. Reversible — users simply sign in
again.

## Response `200`

Successful Response

- RevokeSessionsResponse
  - `users_targeted` integer, required
  - `sessions_revoked` integer, required

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/kobaltlabs/apis/fastapi.md) · [All operations](https://skmtc.dev/kobaltlabs/apis/fastapi/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/kobaltlabs/fastapi/revisions/816d6dca5096/schema)