> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mountthor.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Revoke Session

> Revokes one active session by id within the requesting actor scope. Returns 404 when the session is absent or belongs to another actor.



## OpenAPI

````yaml /api-reference/customer-api.v1.openapi.json delete /v1/admin/sessions/{id}
openapi: 3.1.0
info:
  title: Mount Thor Customer API
  version: v1
servers:
  - description: Mount Thor customer API edge
    url: https://api.mountthor.com
security: []
paths:
  /v1/admin/sessions/{id}:
    delete:
      tags:
        - sessions
      summary: Revoke Session
      description: >-
        Revokes one active session by id within the requesting actor scope.
        Returns 404 when the session is absent or belongs to another actor.
      operationId: revoke_customer_session_by_id
      parameters:
        - description: Session UUID
          in: path
          name: id
          required: true
          schema:
            format: uuid
            type: string
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CustomerSessionListEntry'
          description: Session revoked
        '401':
          description: Missing or invalid bearer token
        '403':
          description: Credential is missing account:write scope
        '404':
          description: Session does not exist for this actor
        '429':
          content:
            text/plain:
              schema:
                type: string
          description: Rate limit exceeded
          headers:
            Retry-After:
              description: Seconds before retry.
              schema:
                minimum: 1
                type: integer
      security:
        - api_key_bearer:
            - account:write
components:
  schemas:
    CustomerSessionListEntry:
      additionalProperties: false
      description: |-
        One row of `GET /v1/admin/sessions`. Returns metadata only — never
        the session token, the SHA-256 digest, or any field that would let
        a reader re-use the session.
      properties:
        actor_type:
          description: |-
            `human`, `workload`, or `api-key`. Matches the underlying actor
            that minted the session.
          example: api-key
          type: string
        created_at:
          description: RFC 3339 timestamp when the session was created.
          example: '2026-05-25T17:30:00Z'
          type: string
        expires_at:
          description: RFC 3339 timestamp when the session expires.
          example: '2026-05-25T17:45:00Z'
          type: string
        id:
          description: Stable UUID for the session.
          format: uuid
          type: string
        last_used_at:
          description: Last successful use timestamp, if observed.
          example: '2026-05-25T17:42:00Z'
          type:
            - string
            - 'null'
        scopes:
          description: Scopes granted to the session.
          example:
            - compute:read
            - compute:write
          items:
            type: string
          type: array
        status:
          description: >-
            Session lifecycle state. Active sessions can authenticate compute
            calls.
          example: active
          type: string
        token_fingerprint:
          description: |-
            `sha256:` prefix + the first 16 hex digits of the token digest.
            Safe for display; not a credential.
          example: sha256:0123456789abcdef
          type: string
      required:
        - id
        - actor_type
        - token_fingerprint
        - scopes
        - status
        - created_at
        - expires_at
      type: object
  securitySchemes:
    api_key_bearer:
      bearerFormat: mthr_live_*
      description: Bearer scheme name used by typed customer admin operations.
      scheme: bearer
      type: http

````