---
title: "Deny a CLI login (browser session only)"
method: POST
path: "/api/auth/device/deny"
tags: ["Authentication"]
---

# Deny a CLI login (browser session only)

`POST /api/auth/device/deny`

## Request

- Base URL: `https://demo.supercheck.dev`
- URL: `https://demo.supercheck.dev/api/auth/device/deny`
- Auth: API key in cookie `better-auth.session_token`

Terminally denies the request; also revokes an approval that has not yet been exchanged.

## Request body

- object
  - `user_code` string, required

## Response `200`

Recorded.

## Other responses

- `400`: Invalid request.
- `401`: Authentication required or token invalid
- `403`: Cross-origin request.
- `404`: Unknown code.
- `409`: Code already handled.
- `410`: Code expired.
- `429`: Too many requests.
- `500`: Server error.
- `503`: Browser login is disabled.

## Changes

- **2026-10-20** `74087800edc9`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/supercheck-io/apis/supercheck-api/changes/api/auth/device/deny/post.md)

---

[API](https://skmtc.dev/supercheck-io/apis/supercheck-api.md) - [All operations](https://skmtc.dev/supercheck-io/apis/supercheck-api/llms.txt) - [OpenAPI document](https://skmtc.dev/supercheck-io/apis/supercheck-api/revisions/7fa0162c07bd?raw)