Auth

Revoke a specific session

Revokes one non-current session by its sid. The KV blocklist is updated so the gateway rejects the next request bearing that session on its next hit. Cannot be used to revoke the session making this request — use POST /auth/sign-out for that. Requires aal2. Idempotent: a sid that is already revoked or never belonged to the user returns 404 (non-enumeration). See ADR-028.

delete/auth/sessions/{sid}

Request

  • Base URL: https://api.mnemom.ai/v1
  • URL: https://api.mnemom.ai/v1/auth/sessions/{sid}
  • Auth: one of:
    • API key in cookie mnemom_session
    • HTTP bearer

Path parameters

sidstring required

Session identifier returned by GET /auth/sessions.

Response

Session revoked.

revoked_atstring date-time required

Changes

No recorded changes to this operation across all 1 revision of this API.