1. Docs
  2. API Reference
  3. Revoke every trusted device for the caller

Revoke every trusted device for the caller

DELETE/v1/identity/auth/mfa/trusted-devices

Authentication

  • Bearer Token Authorization

    JWT access token

Code samples

cURLJavaScriptPythonGo
curl -X DELETE "https://api.canopy.dev/v1/identity/auth/mfa/trusted-devices" \
  -H "Authorization: Bearer $CANOPY_TOKEN"

Responses

204 Deletes every row for the identity, regardless of env. Use this for 'sign out everywhere'-style flows.
401 Invalid or expired token
403 This token is not authorized for this endpoint (wrong principal type — e.g., admin token on identity-only endpoint, or vice versa)
On this page

Related endpoints

GETList enrolled MFA factors for the caller
POSTBegin TOTP factor enrollment
POSTComplete TOTP factor enrollment
POSTBegin WebAuthn factor enrollment
POSTComplete WebAuthn factor enrollment
POSTProve a fresh factor to authorise a sensitive MFA mutation
POSTBegin a WebAuthn-backed step-up ceremony
POSTComplete a WebAuthn step-up ceremony
DELETERemove an enrolled MFA factor
POSTRegenerate the identity's single-use recovery codes
GETList the identity's active 'remember this device' records
DELETERevoke a single trusted device