---
title: "Sign a device out from the person's session: their own device, or any for an admin"
method: DELETE
path: "/v1/devices/{id}/credential"
tags: ["devices"]
---

# Sign a device out from the person's session: their own device, or any for an admin

`DELETE /v1/devices/{id}/credential`

## Request

- Base URL: `https://api.sixminute.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.sixminute.ai/v1/devices/{id}/credential`
- Auth: HTTP bearer

Clears the device's credential, so a daemon or phone that is offline at sign-out is signed out too, and ends the WorkOS sessions recorded against it, so their access tokens are refused on their next request. The device stays and can sign in again. 404 for a device the caller may not reach.

## Path parameters

- `id` string, required

## Response `204`

Cleared.

## Other responses

- `400`: The body, query or path did not validate; `errors` lists the fields.
- `401`: No bearer token, or one that does not verify or has expired.
- `403`: The token verified but may not do this: no organisation, not provisioned, wrong role, or a device problem.
- `404`: No such row for this tenant.

---

[API](https://skmtc.dev/sixminute/apis/sixminute-api.md) - [All operations](https://skmtc.dev/sixminute/apis/sixminute-api/llms.txt) - [OpenAPI document](https://skmtc.dev/sixminute/apis/sixminute-api/revisions/605577eadc10?raw)