agent-manage-sessions

Manage OAuth Sessions

List and revoke active OAuth sessions granted to the Epic FlowState gateway.

Prerequisites

• Authenticated with a valid API key or OAuth session (see agent-auth)

Steps

List active sessions

epic-agent sessions list
# Shows: session ID, client, granted scopes, created at, last active

Inspect a session

epic-agent sessions get <session-id>
# Shows: full session details, token expiry, associated client app

Revoke a single session

epic-agent sessions revoke <session-id>
# Immediately invalidates this OAuth session

Revoke all sessions (security incident response)

epic-agent sessions revoke --all
# Invalidates every OAuth session — use for security incidents
# You will need to re-authenticate after this

Revoke sessions for a specific client

epic-agent sessions list --client <client-id>
epic-agent sessions revoke --client <client-id>

Session fields

Field	Description
id	Unique session identifier
clientId	OAuth client that requested the session
scopes	Granted permission scopes
createdAt	When the session was authorized
lastActiveAt	Last API call timestamp
expiresAt	Token expiry time

Error handling

• Session already expired: no action needed, it will be cleaned up automatically
• Cannot revoke current session via --all: you will be logged out — confirm before proceeding
• Session not found: already revoked or expired