List where you're signed in

Lists your active console sessions, newest first: when each started, when you last signed in on it, when it ends (after 2 hours without activity, and 12 hours after the sign-in at the latest), and the country and browser of the sign-in. End one, or all but the current one, with users.sessions.revoke.

Who can call it: the signed-in user, for their own account.

At a glance

REST: GET /api/v1/users/me/sessions
MCP tool: users_sessions_list
Operation ID: users.sessions.list
Scope: Platform
Permission: account:read
Risk tier: read
Dry run: Not supported
Idempotency: Not needed (read only)
Modes: Test and live
Authentication: API key with the account:read scope
Since: M13

Request

Query parameters

This operation takes no query parameters.

Response

200 OK with a JSON object:

Field	Type	Description
`object`	`"list"`
`data`	array of object
`data[].object`	`"session"`
`data[].id`	`ses_…` ID
`data[].createdAt`	date-time	When the session was created (the sign-in).
`data[].lastAuthenticatedAt`	date-time	When you last proved who you are on this session (sign-in or a fresh sign-in).
`data[].idleExpiresAt`	date-time	When it ends without activity (2 hours after the last request, moved forward by activity).
`data[].expiresAt`	date-time	When it ends at the latest (12 hours after the sign-in).
`data[].country`	string or null	The country of the sign-in request, when known.
`data[].userAgent`	string or null	The browser that signed in.

Examples

One session

HTTP

GET /api/v1/users/me/sessions
Authorization: Bearer or_test_…

Response (200):

JSON

{
  "object": "list",
  "data": [
    {
      "object": "session",
      "id": "ses_01m4tx5nj8emwbyf7y9vcf47xc",
      "createdAt": "2026-10-30T08:15:00.000Z",
      "lastAuthenticatedAt": "2026-10-30T08:15:00.000Z",
      "idleExpiresAt": "2026-10-30T10:15:00.000Z",
      "expiresAt": "2026-10-30T20:15:00.000Z",
      "country": "HR",
      "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_5) AppleWebKit/605.1.15 Version/18.5 Safari/605.1.15"
    }
  ]
}

Errors

Code	HTTP status	When	What to do
`permission_denied`	403	The caller isn't a signed-in user.	Ask an organization owner or admin for a role or scope that allows this action.

It can also return these common errors: validation_failed, api_version_unsupported, authentication_required, api_key_invalid, resource_not_found, dry_run_not_supported, rate_limited, internal_error.

At a glance#

Request#

Query parameters#

Response#

Examples#

One session#

Errors#