Deprovision Tunnel

Close an active tunnel connection and clean up. Requires the session token (the token query parameter from the provision response's connectUrl), so only the session's owner can deprovision it.

{
  "subdomain": "agent-a1b2c3d4",
  "status": "deprovisioned"
}

Without a valid token the request returns 403. Note that deprovisioning is rarely needed: disconnecting the client pauses billing, and the TTL auto-stops the session.