---
title: "Revoke User Sessions"
method: POST
path: "/api/admin/users/{user_id}/revoke-sessions"
tags: ["admin"]
---

# Revoke User Sessions

`POST /api/admin/users/{user_id}/revoke-sessions`

Bump ``users.session_version`` to invalidate the user's active JWTs.

Platform-admin only. Used for incident response when WorkOS Directory
Sync can't deliver fast enough — phished credentials, urgent offboard,
customer security request, etc. The next request from any of the user's
sessions will fail with ``session_revoked``; they can re-authenticate
immediately to mint a fresh token.

## Path parameters

- `user_id` integer, required

## Response `204`

Successful Response

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.net/quadrillion/apis/quadrillion-cloud-api.md) · [All operations](https://skmtc.net/quadrillion/apis/quadrillion-cloud-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/quadrillion/quadrillion-cloud-api/revisions/ee473d0e84e0/schema)