Removing user authenticators programmatically can be done through the Server API’s Delete Authenticator endpoint.

This functionality should be used with caution as removing a user’s authenticators may result in them getting locked out of their account.