---
title: "Expire All"
method: POST
path: "/api/v1/auth/app/{app_id}/expire-all"
tags: ["Authentication"]
---

# Expire All

`POST /api/v1/auth/app/{app_id}/expire-all`

## Request

- Base URL: `https://api.eu.svix.com`
- URL: `https://api.eu.svix.com/api/v1/auth/app/{app_id}/expire-all`
- Auth: HTTP bearer

Expire all of the tokens associated with a specific application.

## Path parameters

- `app_id` string, required: The Application's ID or UID.

## Headers

- `idempotency-key` string

## Request body

- ApplicationTokenExpireIn
  - `expiry` integer, nullable: How many seconds until the old key is expired.
  - `sessionIds` string[]: An optional list of session ids. If any session ids are specified, only Application tokens created with that session id will be expired.

## Response `204`

no content

## Other responses

- `400`: Bad request
- `401`: Unauthorized
- `403`: Forbidden
- `404`: Not Found
- `409`: Conflict
- `422`: Validation Error
- `429`: Too Many Requests

## Changes

- **2026-10-19** `cca56e67e5a4`: 1 info
  - added the required property `code` to the response with the `422` status

[Operation history](https://skmtc.dev/svix/apis/svix-api/changes/api/v1/auth/app/:app_id/expire-all/post.md)

---

[API](https://skmtc.dev/svix/apis/svix-api.md) - [All operations](https://skmtc.dev/svix/apis/svix-api/llms.txt) - [OpenAPI document](https://skmtc.dev/svix/apis/svix-api/revisions/21bb0f86a732?raw)