---
title: Sign out every CLI session for the user
description: "Session-only — \"sign out everywhere\" must come from a real human session; any wbl_* bearer is rejected with INSUFFICIENT_PRIVILEGE."
api_method: POST
api_path: "/v1/auth/cli/revoke-all"
canonical_url: https://wiblo.app/docs/developers/api/cli/revoke-all-my-cli-tokens
last_updated: 2026-07-28T17:12:38+02:00
md_url: https://wiblo.app/docs/developers/api/cli/revoke-all-my-cli-tokens.md
---

# Sign out every CLI session for the user

`POST /v1/auth/cli/revoke-all`

Session-only — "sign out everywhere" must come from a real human session; any `wbl_*` bearer is rejected with `INSUFFICIENT_PRIVILEGE`. Revokes every active `cli_tokens` row for the user and returns the count. Per-user rate-limited at 30/60s.

## Request

**curl**

```bash
curl https://api.wiblo.app/v1/auth/cli/revoke-all \
  -X POST \
  -H "Authorization: Bearer $WIBLO_TOKEN"
```

**TypeScript**

```ts
import { createSdk, revokeAllMyCliTokens } from "@workspace/sdk"

const sdk = createSdk({ baseUrl: "https://api.wiblo.app" })

const { data, error } = await revokeAllMyCliTokens({
  client: sdk,
})
```

## Responses

**`200`** — Every active CLI session for the user is revoked. Returns `RevokeAllCliTokensResponse`.

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `revoked_count` | `integer` | Yes |  |

**`401`** — No valid Supabase session cookie was present. Returns `ApiErrorEnvelope`.

**`403`** — A `wbl_*` bearer was presented to a session-only route (`INSUFFICIENT_PRIVILEGE`). Returns `ApiErrorEnvelope`.

**`429`** — Rate limit exceeded. The body's `error.code` is `RATE_LIMITED` and `error.details.retry_after` is the same number of seconds as the `Retry-After` header. Returns `ApiErrorEnvelope`.