[FEATURE]

Preflight Checklist

• [x] I have searched existing requests and this feature hasn't been requested yet
• [x] This is a single feature request (not multiple features)

Problem Statement

É um absurdo total a Anthropic não ter essa opção na plataforma. Não existe nenhuma forma de revogar sessões ativas do Claude Code remotamente. Até concorrentes como o ChatGPT/OpenAI permitem desconectar o Codex CLI com um clique. Trocar a senha do Google e revogar o acesso OAuth não desconecta sessões existentes do Claude Code imediatamente. Isso é uma falha crítica de segurança — se um dispositivo for perdido ou roubado, o usuário não tem como impedir o uso da sua conta/assinatura. Solicito que implementem um painel de gerenciamento de sessões CLI com opção de revogar acesso instantaneamente, assim como já existe para sessões web no claude.ai.

It is completely unacceptable that Anthropic does not have this option on the platform. There is no way to remotely revoke active Claude Code sessions. Even competitors like ChatGPT/OpenAI allow disconnecting Codex CLI with a single click. Changing the Google password and revoking OAuth access does not immediately disconnect existing Claude Code sessions. This is a critical security flaw — if a device is lost or stolen, the user has no way to prevent usage of their account/subscription. I request the implementation of a CLI session management panel with the ability to revoke access instantly, as already exists for web sessions on claude.ai.

<img width="481" height="159" alt="Image" src="https://github.com/user-attachments/assets/fc01bcc5-2691-4c7f-a47c-8a2ad32baea2" />

Proposed Solution

Add a "Claude Code Active Sessions" section to the claude.ai account settings page (https://claude.ai/settings/account) that displays all active CLI/VSCode sessions with device name, location, IP address, and last activity timestamp. Each session should have a "Revoke" button for individual disconnection, plus a "Revoke All CLI Sessions" button to immediately invalidate all Claude Code OAuth tokens across all devices. This should work the same way the existing "Desconectar de todos os dispositivos" works for web sessions, but specifically targeting CLI/IDE tokens. The revocation must be instant — not dependent on token expiration — by implementing a server-side token blocklist that is checked on every API request.

Alternative Solutions

_No response_

Priority

High - Significant impact on productivity

Feature Category

CLI commands and flags

Use Case Example

_No response_

Additional Context

_No response_