---
title: "Revoke a device: the owner's own, or any in the tenant for an admin"
method: DELETE
path: "/v1/devices/{id}"
tags: ["devices"]
---

# Revoke a device: the owner's own, or any in the tenant for an admin

`DELETE /v1/devices/{id}`

## Request

- Base URL: `https://api.sixminute.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.sixminute.ai/v1/devices/{id}`
- Auth: HTTP bearer

Sets `revoked_at` once; the row stays so the audit trail does. The device-bound routes then refuse the id, and the WorkOS sessions recorded against the device are ended, so their access tokens are refused on their next request.

## Path parameters

- `id` string, required

## Response `200`

The device, revoked.

- object
  - `id` string, required
  - `user_id` string, required
  - `name` string, required
  - `platform` 'macos' | 'windows' | 'ios' | 'android' | 'web', required
  - `created_at` string, date-time, required
  - `last_seen_at` string, date-time, nullable
  - `revoked_at` string, date-time, nullable

## Other responses

- `400`: The body, query or path did not validate; `errors` lists the fields.
- `401`: No bearer token, or one that does not verify or has expired.
- `403`: The token verified but may not do this: no organisation, not provisioned, wrong role, or a device problem.
- `404`: No such row for this tenant.

---

[API](https://skmtc.dev/sixminute/apis/sixminute-api.md) - [All operations](https://skmtc.dev/sixminute/apis/sixminute-api/llms.txt) - [OpenAPI document](https://skmtc.dev/sixminute/apis/sixminute-api/revisions/605577eadc10?raw)