Revoke a refresh token
Invalidates the given refresh token so it can no longer be exchanged for new sessions. The current access token stays valid until its own 15-minute expiry - this only prevents renewing it.
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
curl -X POST "https://example.com/api/v1/auth/logout" \ -H "Content-Type: application/json" \ -d '{}'{ "ok": true}Request a one-time code to change your password POST
Emails a 6-digit code to the logged-in user, valid briefly. Submit it to `/auth/change-password` along with the new password. Requires an existing session (log in first) and an Admin or Owner role - a Member/Viewer session gets a 403 here.
Get a device's command catalog GET
The commands this specific device supports right now what a control UI or an AI agent should present as its available actions. Devices with no custom DeviceType return the legacy ON/OFF/TOGGLE/STATUS set.