End the current session

POST /api/v1/auth/logout

Revokes the calling session's token id, so it stops working immediately rather than at expiry.

Best-effort by design: it answers ok even if the revocation write failed, because the worst case is a token that dies at its natural expiry. Do not treat ok true as proof the token is dead.

At a glance

Authentication: Staff token or session Staff session only — an API token cannot call this

Errors

Code	When it is returned
`ERR_FORBIDDEN`403	the caller holds an API token — this route refuses machine credentials

Request

curl -X POST "$BASE/api/v1/auth/logout" \
  -H "Authorization: Bearer $XR_TOKEN"

Response 200 OK

{
  "data": { "ok": true }
}

BASE is your tenant host: the same address you sign in on.

Try it on your own network.

50 subscribers for 7 days. You pay nothing.

Try it free Talk to us