---
title: "Every credential this account has issued, and what can end it"
method: GET
path: "/api/security"
tags: ["security"]
---

# Every credential this account has issued, and what can end it

`GET /api/security`

## Request

- Base URL: `https://app.nerdit.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://app.nerdit.ai/api/security`
- Auth: none declared

Answer what reaches this account's node, and on whose authority.

One session, three reads, no relay: everything here is durable state,
so — unlike ``GET /api/nodes``, which merges in a liveness projection —
this page is the same answer whether or not a daemon is connected.

## Response `200`

Successful Response

- SecurityView: Everything reaching this account's machines — or able to again — and what ends it.
  - `clients` ClientView[], required
    - `client_id` string, required
    - `client_name` string, required
  - `grants` GrantView[], required
    - `id` string, uuid, required
    - `client_id` string, required
    - `client_name` string, required
    - `client_revoked` boolean, required
    - `self_registered` boolean, required
    - `redirect_uris` string[], required
    - `node_id` string, uuid, required
    - `node_slug` string, required
    - `node_name` string, required
    - `role` 'submitter', required
    - `scopes` string[], required
    - `granted_at` string, date-time, required
    - `families` FamilyView[], required
      - `family_id` string, uuid, required
      - `created_at` string, date-time, required
      - `expires_at` string, date-time, required
      - `last_used_at` string, date-time, required
  - `proxy_sessions` ProxySessionView[], required
    - `id` string, uuid, required
    - `node_id` string, uuid, required
    - `node_slug` string, required
    - `destination_host` string, required
    - `role` string, required
    - `created_at` string, date-time, required
    - `last_seen_at` string, date-time, required
    - `absolute_expires_at` string, date-time, required
  - `account_grants` AccountGrantView[]
    - `id` string, uuid, required
    - `client_id` string, required
    - `client_name` string, required
    - `client_revoked` boolean, required
    - `self_registered` boolean, required
    - `redirect_uris` string[], required
    - `resource` string, required
    - `role` 'submitter', required
    - `scopes` string[], required
    - `granted_at` string, date-time, required
    - `updated_at` string, date-time, required
    - `scope_kind` 'nodes' | 'projects', required
    - `nodes` AccountGrantNodeView[], required
      - `id` string, uuid, required
      - `slug` string, required
      - `display_name` string, required
    - `projects` AccountGrantProjectView[], required
      - `id` string, required
      - `name` string, required
      - `node_id` string, uuid, required
      - `node_name` string, required
    - `families` FamilyView[], required
      - `family_id` string, uuid, required
      - `created_at` string, date-time, required
      - `expires_at` string, date-time, required
      - `last_used_at` string, date-time, required
  - `available_account_nodes` AccountGrantNodeView[]
    - `id` string, uuid, required
    - `slug` string, required
    - `display_name` string, required
  - `max_account_grant_nodes` integer
  - `available_account_projects` AccountGrantProjectView[]
    - `id` string, required
    - `name` string, required
    - `node_id` string, uuid, required
    - `node_name` string, required
  - `max_account_grant_projects` integer

## Other responses

- `401`: Unauthorized

---

[API](https://skmtc.dev/nerdit/apis/nerdit-cloud-web.md) · [All operations](https://skmtc.dev/nerdit/apis/nerdit-cloud-web/llms.txt) · [OpenAPI document](https://skmtc.dev/nerdit/apis/nerdit-cloud-web/revisions/06e3b44b58be?raw)
