---
title: "Kill User Sessions"
method: POST
path: "/management/sessions/kill"
tags: ["management"]
---

# Kill User Sessions

`POST /management/sessions/kill`

Invalidate all sessions for a user.

Called by Auth0 Actions on password change (M2M JWT auth).
Sets a user-scoped denylist timestamp — any access token with iat before
this timestamp will be rejected by the shared auth dependency.

## Request body

- KillSessionsRequest
  - `userId` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/adapter/apis/adapter-api.md) · [All operations](https://skmtc.net/adapter/apis/adapter-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/adapter/adapter-api/revisions/ab13bbbbd391/schema)