---
title: "List sessions"
method: GET
path: "/api/v1/account/sessions"
tags: ["account"]
---

# List sessions

`GET /api/v1/account/sessions`

## Request

- Base URL: `https://point11.ai`
- URL: `https://point11.ai/api/v1/account/sessions`
- Auth: OAuth 2 (authorization code, authorization URL `https://auth.point11.ai/oauth2/authorize`, token URL `https://auth.point11.ai/oauth2/token`)

List the signed-in person's own active sign-in sessions: browser and operating system, IP address, sign-in method, when each started and expires, and which one is this device.

## Query parameters

- `limit` integer: Number of items to return (1–1000)
- `cursor` string: Opaque cursor returned as nextCursor by the previous page

## Headers

- `Point11-Organization` string, uuid

## Response `200`

Success.

- AccountSessionsListResponse
  - `data` object[], required
    - `id` string, required
    - `device` string, nullable, required: The browser and operating system the session signed in from, such as "Chrome on macOS"; null when its sign-in recorded none
    - `deviceKind` 'phone' | 'tablet' | 'computer', nullable, required: What kind of device the session signed in from; null when its sign-in named none
    - `ipAddress` string, nullable, required: The address the session signed in from
    - `location` object, nullable, required: Where the session signed in from, as Vercel's network placed its address at sign-in; null when it was not placed
      - `city` string, nullable, required
      - `region` string, nullable, required: The region part of its ISO 3166-2 code, such as "IL"
      - `country` string, nullable, required: Its ISO 3166-1 alpha-2 code, such as "US"
    - `createdAt` string, date-time, required: When the person signed in
    - `expiresAt` string, date-time, required
    - `current` boolean, required: This device: the session the call itself was made from
    - `method` 'email' | 'google' | 'microsoft' | 'sso', nullable, required: How the person signed in: an emailed code, Google, Microsoft or single sign-on
  - `nextCursor` string, nullable, required

## Other responses

- `400`: The input, query, or Idempotency-Key is invalid.
- `401`: The bearer is missing, expired, or not accepted.
- `403`: The credential lacks the operation's scope or role, or the operation needs a different door.
- `404`: The resource or organization does not exist for this caller.
- `405`: This path takes another HTTP method, named in `Allow`.
- `409`: The request conflicts with current state or with prior use of its Idempotency-Key.
- `413`: The request, or the answer it asks for, is too large; narrow it.
- `429`: The credential's rate budget is spent; retry after `Retry-After` seconds.
- `500`: An unexpected server failure; retry later. Only `request_id` identifies it.
- `503`: A dependency is temporarily unavailable; retry after `Retry-After` seconds.
- `default`: Another status a product answers for its own refusal (for example `415` for an unsupported attachment); branch on `code`.

---

[API](https://skmtc.dev/point11/apis/point11-api.md) · [All operations](https://skmtc.dev/point11/apis/point11-api/llms.txt) · [OpenAPI document](https://skmtc.dev/point11/apis/point11-api/revisions/36a84c7aca11?raw)