1. Docs
  2. API Reference
  3. Forget every remembered device

Forget every remembered device

DELETE/v1/auth/mfa/trusted-devices

Forgets every remembered device of the authenticated administrator and clears the ca_mfa_trusted_device cookie on this response, so even the calling browser is challenged next time. Returns 204 No Content.

Authentication

Bearer TokenAuthorization

JWT access token. Never send alongside X-API-Key: a request carrying both is refused.

Responses

Deletes every remembered device and clears the caller's own cookie, so every browser is challenged on its next sign-in.

application/json

  • errorApiErrorBodyDto*

application/json

  • errorApiErrorBodyDto*
Request
curl -X DELETE "https://auth.canopy-io.com/v1/auth/mfa/trusted-devices" \
  -H "Authorization: Bearer $CANOPY_TOKEN"
Response
HTTP/1.1 204 Deletes every remembered device and clears the caller's own cookie, so every browser is challenged on its next sign-in.

(empty body)
 Related endpoints
GETList the caller's enrolled second factors
POSTBegin authenticator app enrollment
POSTComplete authenticator app enrollment
POSTBegin passkey enrollment
POSTComplete passkey enrollment
POSTProve a fresh second factor before a sensitive change
POSTBegin a passkey step-up
POSTComplete a passkey step-up
DELETERemove one of the caller's second factors
GETHow many recovery codes the caller has left
POSTRegenerate the caller's recovery codes
GETList the caller's remembered devices
DELETEForget one remembered device
 Was this page helpful?

Tell us how we can improve this guide.

Canopy