Deprovision Tunnel

Close an active tunnel connection and clean up. Requires the session token — the token query parameter from the provision response's connectUrl — so only the session's owner can deprovision it.

{
  "subdomain": "agent-a1b2c3d4",
  "status": "deprovisioned"
}

Without a valid token the request returns 403. Note that deprovisioning is rarely needed: disconnecting the client pauses billing, and the TTL auto-stops the session.