diff --git a/app/Http/Requests/CreateApiDeviceRequest.php b/app/Http/Requests/CreateApiDeviceRequest.php
index c11f02263..f685cc153 100644
--- a/app/Http/Requests/CreateApiDeviceRequest.php
+++ b/app/Http/Requests/CreateApiDeviceRequest.php
@@ -55,7 +55,7 @@ public function authorize(SignedRequests $signedRequests): bool
      * The verifier is the one the app made its PKCE challenge from (RFC 7636). An app that showed the terms and privacy
      * policy before sending the person to sign in says which version, and it is recorded as accepted.
      *
-     * @return array<string, list<string>>
+     * @return array<string, list<mixed>>
      */
     public function rules(): array
     {