Skip to main content
DELETE
Revoke Session

Authorizations

Authorization
string
header
required

Bearer scheme name used by typed customer admin operations.

Path Parameters

id
string<uuid>
required

Session UUID

Response

Session revoked

One row of GET /v1/admin/sessions. Returns metadata only — never the session token, the SHA-256 digest, or any field that would let a reader re-use the session.

actor_type
string
required

human, workload, or api-key. Matches the underlying actor that minted the session.

Example:

"api-key"

created_at
string
required

RFC 3339 timestamp when the session was created.

Example:

"2026-05-25T17:30:00Z"

expires_at
string
required

RFC 3339 timestamp when the session expires.

Example:

"2026-05-25T17:45:00Z"

id
string<uuid>
required

Stable UUID for the session.

scopes
string[]
required

Scopes granted to the session.

Example:
status
string
required

Session lifecycle state. Active sessions can authenticate compute calls.

Example:

"active"

token_fingerprint
string
required

sha256: prefix + the first 16 hex digits of the token digest. Safe for display; not a credential.

Example:

"sha256:0123456789abcdef"

last_used_at
string | null

Last successful use timestamp, if observed.

Example:

"2026-05-25T17:42:00Z"