---
title: "Close Harbor Session"
method: DELETE
path: "/api/harbor/sessions/{session_id}"
tags: ["Harbor Sessions"]
---

# Close Harbor Session

`DELETE /api/harbor/sessions/{session_id}`

## Request

- Base URL: `https://app.polytomic.com`
- URL: `https://app.polytomic.com/api/harbor/sessions/{session_id}`
- Auth: one of:
  - HTTP bearer
  - HTTP basic

Closes a service-attested Harbor MCP transport session.

## Path parameters

- `session_id` string, uuid, required: Harbor session ID

## Headers

- `X-Polytomic-Version` string
- `X-Polytomic-MCP-Key-ID` string: ID of the key that signed the attestation
- `X-Polytomic-MCP-Timestamp` integer: Unix time, in seconds, when the attestation was signed
- `X-Polytomic-MCP-Nonce` string: Single-use value of at least 16 characters included in the signature
- `X-Polytomic-MCP-Signature` string: Attestation signature
- `X-Polytomic-Activity-Request-ID` string: New nonzero UUID for each request, required for scoped credentials; a reused value is rejected.
- `X-Polytomic-Harbor-Session` string: Token issued when the session was registered

## Response `200`

OK

- CloseHarborSessionEnvelope
  - `data` object: The closed session
    - `session_id` string, uuid: Harbor session ID
    - `status` string: Session status after the request

## Other responses

- `403`: Forbidden
- `503`: Service Unavailable

## Changes

- **2026-09-05** `30ade6c6d535`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/polytomic/apis/polytomic-api/changes/api/harbor/sessions/:session_id/delete.md)

---

[API](https://skmtc.dev/polytomic/apis/polytomic-api.md) - [All operations](https://skmtc.dev/polytomic/apis/polytomic-api/llms.txt) - [OpenAPI document](https://skmtc.dev/polytomic/apis/polytomic-api/revisions/3c88180d2470?raw)