diff --git a/packages/xo-lib/index.js b/packages/xo-lib/index.js
index 21b5e8639..878bc686b 100644
--- a/packages/xo-lib/index.js
+++ b/packages/xo-lib/index.js
@@ -299,8 +299,11 @@ function Xo(opts) {
 }
 
 Xo.prototype.call = function (method, params) {
-  // TODO: prevent session.*() from being because it may interfere
+  // Prevent session.*() from being because it may interfere
   // with this class session management.
+  if (startsWith(method, 'session.')) {
+    throw new Error('session.*() methods are disabled from this interface');
+  }
 
   return connect.call(this).then(function () {
     var self = this;