---
title: "List the Bearer actor's browser sessions"
method: GET
path: "/auth/v1/account/sessions"
tags: ["Auth"]
---

# List the Bearer actor's browser sessions

`GET /auth/v1/account/sessions`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/auth/v1/account/sessions`
- Auth: API key in header `apikey` and HTTP bearer

Machine route (apikey + user Bearer). Returns live, secret-free browser-session summaries for the user identified by the access token.

## Response `200`

Live browser sessions for the Bearer actor.

- object
  - `sessions` object[], required
    - `session_id` string, uuid, required
    - `created_at` string, date-time, required
    - `last_refreshed_at` string, date-time, required
    - `expires_at` string, date-time, required
    - `hard_expires_at` string, date-time, required
    - `amr` string[], required
    - `passkey_id` string, nullable, required

## Other responses

- `401`: Missing or invalid authentication. Run402-originated JSON bodies use the canonical ErrorEnvelope.

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)