---
title: "List sessions"
method: GET
path: "/auth/sessions"
---

# List sessions

`GET /auth/sessions`

## Request

- Base URL: `https://app.yoping.me/api/v1`
- URL: `https://app.yoping.me/api/v1/auth/sessions`
- Auth: API key in cookie `yp_session`

Lists the caller's active sessions with the current one flagged.

## Response `200`

The caller's sessions.

- object: Uniform success envelope: the payload is always under `data`.
  - `data` object, required
    - `sessions` Session[], required
      - `id` string, required
      - `created_at` string, date-time, required
      - `last_seen_at` string, date-time, nullable, required
      - `current` boolean, required: True for the session making this request.

## Other responses

- `401`: Not authenticated (code `unauthorized`): missing, invalid, or expired session; invalid login credentials; or a Bearer token, which this surface rejects.
- `429`: Too many requests (code `rate_limited`). A global per-IP budget of 300 requests/minute (burst 60) applies to every endpoint; login, signup, and test alerts have tighter dedicated limits.

---

[API](https://skmtc.dev/yoping/apis/yopingme-api.md) · [All operations](https://skmtc.dev/yoping/apis/yopingme-api/llms.txt) · [OpenAPI document](https://skmtc.dev/yoping/apis/yopingme-api/revisions/76d8deb40173?raw)