Sign out everywhere

Revokes every web session, MCP OAuth token and MCP connection of every account with the caller's email, in every organization, including the calling session. Linked Google or Microsoft sign-ins stay linked. Needs no x-org-id.

POST /auth/sessions/revoke-all

Headers

Authorization string Required
Bearer <session token>: the signed-in user’s Scaffold session token.

Returns

revoked boolean
webSessions integer

cURL Node Python

curl -X POST "https://api.scaffoldyourdocs.com/auth/sessions/revoke-all" \
  -H "Authorization: Bearer <session token>" \
  -H "Content-Type: application/json" \
  -d '{}'

const response = await fetch("https://api.scaffoldyourdocs.com/auth/sessions/revoke-all", {
  method: "POST",
  headers: {
    "Authorization": "Bearer <session token>",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({})
});

import requests

response = requests.post(
    "https://api.scaffoldyourdocs.com/auth/sessions/revoke-all",
    headers={
        "Authorization": "Bearer <session token>",
        "Content-Type": "application/json"
    },
    json={},
)

Response (shape)

{
  "revoked": true,
  "webSessions": 0
}