Authentication

Logout

Destroys the current browser session and regenerates the CSRF token.

POST/auth/logout

Authorization

panelSession

pterodactyl_session<token>

Browser session cookie. This is the default name; SESSION_COOKIE or APP_NAME can change it for a deployment.

In: cookie

curl -X POST "https://example.com/auth/logout"

Empty

Reset password POST

Resets an account password using a password reset token. The response tells the frontend whether the user must return to the login form.

List client servers GET

Returns a paginated list of servers the authenticated user can access as an owner, subuser, or administrator.