---
title: "Revoke every remote credential this account has issued"
method: POST
path: "/api/security/revoke-all"
tags: ["security"]
---

# Revoke every remote credential this account has issued

`POST /api/security/revoke-all`

## Request

- Base URL: `https://app.nerdit.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://app.nerdit.ai/api/security/revoke-all`
- Auth: none declared

Cut off every connector, dashboard session and guest session, and nothing else.

No 404 branch: the subject is the caller's own account, which the
session already proved exists. An account with nothing left to revoke
revokes zero, exactly as a repeat of any other scope does, though a
stream whose credential is already dead still closes.

## Response `200`

Successful Response

- AccountRevocationView: Everything "revoke all remote access" reached, counted per kind.
  - `revoked_grants` integer, required
  - `revoked_families` integer, required
  - `revoked_proxy_sessions` integer, required
  - `revoked_visitor_sessions` integer, required
  - `closed_streams` integer, required

## Other responses

- `401`: Unauthorized
- `403`: Forbidden

---

[API](https://skmtc.dev/nerdit/apis/nerdit-cloud-web.md) · [All operations](https://skmtc.dev/nerdit/apis/nerdit-cloud-web/llms.txt) · [OpenAPI document](https://skmtc.dev/nerdit/apis/nerdit-cloud-web/revisions/06e3b44b58be?raw)