---
title: "Disable an account and end all its sessions and tokens"
method: POST
path: "/api/admin/users/{userId}/disable"
tags: ["Admin"]
---

# Disable an account and end all its sessions and tokens

`POST /api/admin/users/{userId}/disable`

## Request

- Base URL: `https://slimlytics.com`
- URL: `https://slimlytics.com/api/admin/users/{userId}/disable`
- Auth: HTTP bearer

## Path parameters

- `userId` string, uuid, required

## Response `204`

Done

## Other responses

- `400`: Invalid request
- `401`: Authentication required
- `403`: Not allowed for this credential (API tokens, non-admins), or error code `mfa_required` when a session that verified a passkey within 12 hours is needed
- `404`: Site or resource not found
- `500`: Internal service error

---

[API](https://skmtc.dev/slimlytics/apis/slimlytics-api.md) · [All operations](https://skmtc.dev/slimlytics/apis/slimlytics-api/llms.txt) · [OpenAPI document](https://skmtc.dev/slimlytics/apis/slimlytics-api/revisions/f9a26641a254?raw)
