---
title: "Revoke the current signed-in user session"
method: POST
path: "/v1/session:revoke"
---

# Revoke the current signed-in user session

`POST /v1/session:revoke`

## Request

- Base URL: `https://app.ohmyho.st`
- URL: `https://app.ohmyho.st/v1/session:revoke`
- Auth: HTTP bearer

Revokes only the session proven by the bearer credential, confirms its absence from active WorkOS sessions and records local terminal denial. No organization is required. The request body and query must be empty; caller-supplied session or user identifiers are not accepted. Repeated private processing cannot revoke another session. Once revoked, the old bearer is no longer authorized, including for a public replay. This synchronous identity-lifecycle operation does not create a project operation.

## Headers

- `X-Request-Id` string
- `Idempotency-Key` string, required

## Response `200`

Provider session revocation and local terminal denial are confirmed.

- object
  - `revoked` true, required

## Other responses

- `400`: The request failed.
- `401`: The request failed.
- `403`: The request failed.
- `429`: The request failed.
- `503`: The request failed.

---

[API](https://skmtc.dev/ohmyho/apis/ohmyho-st-api.md) · [All operations](https://skmtc.dev/ohmyho/apis/ohmyho-st-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ohmyho/apis/ohmyho-st-api/revisions/d069888c0017?raw)