---
title: "Get trusted devices"
method: GET
path: "/api/my-account/trusted-devices"
tags: ["My account"]
---

# Get trusted devices

`GET /api/my-account/trusted-devices`

## Request

- Base URL: `https://[tenant_id].logto.app`
- URL: `https://[tenant_id].logto.app/api/my-account/trusted-devices`
- Auth: OAuth 2 (client credentials, token URL `/oidc/token`, scopes: `all`)

Retrieve all active trusted devices for the signed-in user. A logto-verification-id in header and the trusted-devices scope are required. Each entry includes isCurrent, which is true only when the browser's trusted-device cookie passes full credential validation for that record.

## Response `200`

A list of the signed-in user's active trusted devices.

- object[]
  - `id` string, required
  - `userAgent` string, nullable, required
  - `country` string, nullable, required
  - `city` string, nullable, required
  - `createdAt` number, required
  - `lastUsedAt` number, required
  - `expiresAt` number, required
  - `isCurrent` boolean, required

## Other responses

- `400`: Bad Request
- `401`: Permission denied, recent user authentication is required or the access token does not include the `trusted-devices` scope.
- `403`: Permission denied, the application is a third-party application. Account API operations that require recent authentication only accept first-party applications.
- `500`: Internal Server Error

## Changes

- **2026-09-07** `5768a9ce87db`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/logto/apis/logto-api-references/changes/api/my-account/trusted-devices/get.md)

---

[API](https://skmtc.dev/logto/apis/logto-api-references.md) - [All operations](https://skmtc.dev/logto/apis/logto-api-references/llms.txt) - [OpenAPI document](https://skmtc.dev/logto/apis/logto-api-references/revisions/beed1405186a?raw)