Synopsis
Description
Clears your local session: the session record in ~/.capy/auth/session.json that holds your refresh token, the per-user session files in ~/.capy/auth/sessions/, and the cached project keys under ~/.capy/orgs/{orgId}/projects/. There is no capy login - run capy to sign in again.
Capy also drops the user id pinned in the project’s .capy/sync-state and flags the next browser sign-in as a forced login, so the next capy run can’t silently re-authenticate as the previous user. That matters on a shared machine.
Master keys survive logout. The double-wrapped key.enc files in ~/.capy/orgs/{orgId}/users/{userId}/ remain on disk - they’re already encrypted at rest, and you need them to sign back in without re-redeeming every invite. To fully wipe Capy from a machine, also delete ~/.capy/.
capy logout is a no-op in local-only mode - that profile has no account or server session to end. Use capy lock to lock your key instead.
Example
If there’s nothing left to clear:
On a local-only profile:
See also
Last modified on August 11, 2026
