diff --git a/vault/app/api/auth/logout/route.ts b/vault/app/api/auth/logout/route.ts
new file mode 100644
index 0000000..a7ede13
--- /dev/null
+++ b/vault/app/api/auth/logout/route.ts
@@ -0,0 +1,7 @@
+import { NextResponse } from "next/server";
+import { clearSession } from "@/lib/server-security";
+
+export async function POST() {
+  await clearSession();
+  return NextResponse.json({ ok: true });
+}