---
title: "List signed-in devices"
method: GET
path: "/api/account/sessions"
tags: ["Account"]
---

# List signed-in devices

`GET /api/account/sessions`

## Request

- Base URL: `https://slimlytics.com`
- URL: `https://slimlytics.com/api/account/sessions`
- Auth: HTTP bearer

## Response `200`

Active sessions, most recently used first

- Session[]
  - `id` string, uuid, required
  - `authMethod` 'password' | 'passkey', required
  - `userAgent` string, nullable
  - `createdAt` string, date-time, required
  - `lastUsedAt` string, date-time, required
  - `expiresAt` string, date-time, required
  - `mfaVerified` boolean, required
  - `current` boolean, required: The session making this request

## Other responses

- `400`: Invalid request
- `401`: Authentication required
- `403`: Not allowed for this credential (API tokens, non-admins), or error code `mfa_required` when a session that verified a passkey within 12 hours is needed
- `500`: Internal service error

---

[API](https://skmtc.dev/slimlytics/apis/slimlytics-api.md) · [All operations](https://skmtc.dev/slimlytics/apis/slimlytics-api/llms.txt) · [OpenAPI document](https://skmtc.dev/slimlytics/apis/slimlytics-api/revisions/f9a26641a254?raw)