---
title: "List Account Sessions"
method: GET
path: "/accounts/{id}/sessions"
tags: ["accounts"]
---

# List Account Sessions

`GET /accounts/{id}/sessions`

## Request

- Base URL: `https://api.instruxi.dev/api/v1/enforcer`
- URL: `https://api.instruxi.dev/api/v1/enforcer/accounts/{id}/sessions`
- Auth: one of:
  - API key in header `Authorization`
  - API key in header `X-API-Key`

## Path parameters

- `id` string, required

## Response `200`

OK

- InternalDeliveryHttpHandlerAdminSessionListResponse
  - `count` integer
  - `data` EnforcerV3InternalUsecaseAccountsAdminSessionInfo[]
    - `client_ip` string
    - `created_at` string
    - `expires_at` string: ExpiresAt is nil for a provider session — Privy owns that lifetime and never tells us when it ends.
    - `id` string: refresh-token family id, or a provider-session row id
    - `kind` string: Kind names the id space: "enforcer" for a refresh-token family, otherwise the provider that owns the session ("privy").
    - `last_used_at` string
    - `signed_in_at` string
    - `signed_in_with` string[]: SignedInWith and SignedInAt are the session's sign-in (000134), as the owner sees them; absent for older and provider sessions.
    - `user_agent` string
  - `success` boolean

## Other responses

- `400`: Bad Request
- `401`: Unauthorized
- `403`: Forbidden

---

[API](https://skmtc.dev/instruxi/apis/enforcer-api.md) · [All operations](https://skmtc.dev/instruxi/apis/enforcer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/instruxi/apis/enforcer-api/revisions/fa82bc1becc0?raw)