Sign out and destroy session
DELETE
/api/auth/logout
Destroys the current session. Subsequent requests require re-authentication. Returns a confirmation message.
Authorizations
tokenAuth
Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.
Type
HTTP (token)
Responses
Session destroyed
application/json
JSON "message": "Signed out successfully"
{
}