---
title: "List the signed-in user's browser sessions"
method: GET
path: "/auth/account/sessions"
tags: ["Auth"]
---

# List the signed-in user's browser sessions

`GET /auth/account/sessions`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/auth/account/sessions`
- Auth: API key in cookie `__Host-Http-r402_session`

Hosted browser-session (cookie) route backing the headless <AccountSecurity> component and the documented-advanced non-Astro contract. Read-only; resolves the actor from the session cookie. The caller's current session is flagged.

## Response `200`

{ sessions: [{ session_id, current, ... }] }

- object

## Other responses

- `401`: Missing or invalid authentication. Run402-originated JSON bodies use the canonical ErrorEnvelope.

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)