---
title: "List aggregated session resource access"
method: GET
path: "/zones/{zoneId}/session-resource-access"
tags: ["Sessions"]
---

# List aggregated session resource access

`GET /zones/{zoneId}/session-resource-access`

## Request

- Base URL: `https://docs.keycard.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://docs.keycard.ai/zones/{zoneId}/session-resource-access`
- Auth: one of:
  - HTTP bearer
  - OAuth 2
    - Client credentials
    - Token URL: `/service-account-token`

Returns aggregated access records per session-resource pair. By default (rollup_children=true), includes access from descendant sessions. Set rollup_children=false to return only direct session access. At least one of user_id, session_id, or resource_id must be provided.

## Path parameters

- `zoneId` string, required

## Query parameters

- `user_id` string
- `session_id` string
- `resource_id` string
- `rollup_children` boolean
- `after` string
- `before` string
- `limit` integer
- `expand[]` union
  - 'total_count'
  - string[]

## Response `200`

Default Response

- IamSessionResourceAccessList
  - `items` IamSessionResourceAccess[], required
    - `session_id` string, required: Session ID
    - `resource_id` string, required: Resource ID
    - `organization_id` string, required: Organization ID
    - `total_access_count` integer, required: Total number of access events for this session-resource pair
    - `first_accessed_at` string, date-time, required: When access first occurred
    - `last_accessed_at` string, date-time, required: When access most recently occurred
  - `pagination` IamPagination, required: Cursor-based pagination metadata
    - `after_cursor` string, required: An opaque cursor used for paginating through a list of results
    - `before_cursor` string, required: An opaque cursor used for paginating through a list of results
    - `total_count` integer: Total number of items matching the query. Only included when expand[]=total_count is requested.

## Other responses

- `default`: Error response

## Changes

- **2026-03-16** `d3d69f45bfed`: 3 info
  - the endpoint scheme security `OAuth2` was added to the API
  - the endpoint scheme security `bearerAuth` was added to the API
  - the endpoint scheme security `iam_bearerAuth` was removed from the API
- **2026-03-09** `cb43483cd1b3`: 6 info
  - added the new optional `query` request parameter `after`
  - added the new optional `query` request parameter `before`
  - added the new optional `query` request parameter `expand[]`
  - added the new optional `query` request parameter `limit`
  - …2 more
- **2026-02-24** `0aa1f5c87e81`: 1 warning
  - deleted the `query` request parameter `has_initiator`

[Operation history](https://skmtc.dev/keycardai/apis/keycard-ai-keycard-api/changes/zones/:zoneId/session-resource-access/get.md)

---

[API](https://skmtc.dev/keycardai/apis/keycard-ai-keycard-api.md) - [All operations](https://skmtc.dev/keycardai/apis/keycard-ai-keycard-api/llms.txt) - [OpenAPI document](https://skmtc.dev/keycardai/apis/keycard-ai-keycard-api/revisions/0dee67e0a73a?raw)