1. Docs
  2. API Reference
  3. Revoke a single trusted device

Revoke a single trusted device

DELETE/v1/identity/auth/mfa/trusted-devices/{id}

Authentication

  • Bearer Token Authorization

    JWT access token

Path Parameters

Name Required Type Description
idRequiredstring

Code samples

cURLJavaScriptPythonGo
curl -X DELETE "https://api.canopy.dev/v1/identity/auth/mfa/trusted-devices/value" \
  -H "Authorization: Bearer $CANOPY_TOKEN"

Responses

204 Deletes the row. The matching cookie continues to ride on subsequent requests but is rejected at verify; the client should also clear the local cookie if the user is on that device.
401 Invalid or expired token
403 This token is not authorized for this endpoint (wrong principal type — e.g., admin token on identity-only endpoint, or vice versa)
404 Trusted device not found or does not belong to the caller
On this page

Related endpoints

GETList enrolled MFA factors for the caller
POSTBegin TOTP factor enrollment
POSTComplete TOTP factor enrollment
POSTBegin WebAuthn factor enrollment
POSTComplete WebAuthn factor enrollment
POSTProve a fresh factor to authorise a sensitive MFA mutation
POSTBegin a WebAuthn-backed step-up ceremony
POSTComplete a WebAuthn step-up ceremony
DELETERemove an enrolled MFA factor
POSTRegenerate the identity's single-use recovery codes
GETList the identity's active 'remember this device' records
DELETERevoke every trusted device for the caller