---
title: "Sign out everywhere else: every other WorkOS session of the person, and their other devices' credentials"
method: POST
path: "/v1/devices/sign-out-elsewhere"
tags: ["devices"]
---

# Sign out everywhere else: every other WorkOS session of the person, and their other devices' credentials

`POST /v1/devices/sign-out-elsewhere`

## Request

- Base URL: `https://api.sixminute.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.sixminute.ai/v1/devices/sign-out-elsewhere`
- Auth: HTTP bearer

The person's session. Ends every WorkOS session of the person but the caller's own (WorkOS lists them, so a session no device row records, one made before devices recorded sessions, is ended too), records each as ended, so its access tokens are refused on their next request, and clears the credential of every other device of the person. The caller's device is the one its session is recorded against, else the one `X-Six-Minute-Device` names. Answers how many sessions and device credentials it ended.

## Response `200`

What was ended.

- object
  - `sessions` integer, required
  - `devices` integer, required

## Other responses

- `401`: No bearer token, or one that does not verify or has expired.
- `403`: The token verified but may not do this: no organisation, not provisioned, wrong role, or a device problem.
- `502`: An upstream this service depends on failed or answered nonsense.
- `503`: A capability this service was not configured with, or a practice system that could not be reached; the `type` says which.

## Changes

- **2026-11-04** `605577eadc10`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/sixminute/apis/sixminute-api/changes/v1/devices/sign-out-elsewhere/post.md)

---

[API](https://skmtc.dev/sixminute/apis/sixminute-api.md) - [All operations](https://skmtc.dev/sixminute/apis/sixminute-api/llms.txt) - [OpenAPI document](https://skmtc.dev/sixminute/apis/sixminute-api/revisions/605577eadc10?raw)