diff --git a/.changeset/grumpy-clocks-refuse.md b/.changeset/grumpy-clocks-refuse.md
new file mode 100644
index 000000000..91b68c39c
--- /dev/null
+++ b/.changeset/grumpy-clocks-refuse.md
@@ -0,0 +1,9 @@
+---
+"@logto/core": minor
+---
+
+Add user suspend API endpoint
+
+Use `PATCH /api/users/:userId/is-suspended` to update a user's suspended state, once a user is suspended, all refresh tokens belong to this user will be revoked.
+
+Suspended users will get an error toast when trying to sign in.