# List where you're signed in

> The users.sessions.list operation: GET /api/v1/users/me/sessions in the REST API and the users_sessions_list tool in the MCP server.

Lists your active console sessions, newest first: when each started, when you last signed in on it, when it
ends (after 2 hours without activity, and 12 hours after the sign-in at the latest), and the country and
browser of the sign-in. End one, or all but the current one, with `users.sessions.revoke`.

**Who can call it:** the signed-in user, for their own account.

## At a glance

- **REST:** `GET /api/v1/users/me/sessions`
- **MCP tool:** `users_sessions_list`
- **Operation ID:** `users.sessions.list`
- **Scope:** Platform
- **Permission:** `account:read`
- **Risk tier:** `read`
- **Dry run:** Not supported
- **Idempotency:** Not needed (read only)
- **Modes:** Test and live
- **Authentication:** API key with the `account:read` scope
- **Since:** M13

## Request

### Query parameters

This operation takes no query parameters.

## Response

`200 OK` with a JSON object:

| Field                        | Type            | Description                                                                                |
| ---------------------------- | --------------- | ------------------------------------------------------------------------------------------ |
| `object`                     | `"list"`        |                                                                                            |
| `data`                       | array of object |                                                                                            |
| `data[].object`              | `"session"`     |                                                                                            |
| `data[].id`                  | `ses_…` ID      |                                                                                            |
| `data[].createdAt`           | date-time       | When the session was created (the sign-in).                                                |
| `data[].lastAuthenticatedAt` | date-time       | When you last proved who you are on this session (sign-in or a fresh sign-in).             |
| `data[].idleExpiresAt`       | date-time       | When it ends without activity (2 hours after the last request, moved forward by activity). |
| `data[].expiresAt`           | date-time       | When it ends at the latest (12 hours after the sign-in).                                   |
| `data[].country`             | string or null  | The country of the sign-in request, when known.                                            |
| `data[].userAgent`           | string or null  | The browser that signed in.                                                                |

## Examples

### One session

```http
GET /api/v1/users/me/sessions
Authorization: Bearer or_test_…
```

Response (`200`):

```json
{
  "object": "list",
  "data": [
    {
      "object": "session",
      "id": "ses_01m4tx5nj8emwbyf7y9vcf47xc",
      "createdAt": "2026-10-30T08:15:00.000Z",
      "lastAuthenticatedAt": "2026-10-30T08:15:00.000Z",
      "idleExpiresAt": "2026-10-30T10:15:00.000Z",
      "expiresAt": "2026-10-30T20:15:00.000Z",
      "country": "HR",
      "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_5) AppleWebKit/605.1.15 Version/18.5 Safari/605.1.15"
    }
  ]
}
```

## Errors

| Code                                                                                   | HTTP status | When                               | What to do                                                                      |
| -------------------------------------------------------------------------------------- | ----------- | ---------------------------------- | ------------------------------------------------------------------------------- |
| [`permission_denied`](https://ownrecord.io/docs/reference/errors.md#permission_denied) | 403         | The caller isn't a signed-in user. | Ask an organization owner or admin for a role or scope that allows this action. |

It can also return these [common errors](https://ownrecord.io/docs/reference.md#common-errors): [`validation_failed`](https://ownrecord.io/docs/reference/errors.md#validation_failed), [`api_version_unsupported`](https://ownrecord.io/docs/reference/errors.md#api_version_unsupported), [`authentication_required`](https://ownrecord.io/docs/reference/errors.md#authentication_required), [`api_key_invalid`](https://ownrecord.io/docs/reference/errors.md#api_key_invalid), [`resource_not_found`](https://ownrecord.io/docs/reference/errors.md#resource_not_found), [`dry_run_not_supported`](https://ownrecord.io/docs/reference/errors.md#dry_run_not_supported), [`rate_limited`](https://ownrecord.io/docs/reference/errors.md#rate_limited), [`internal_error`](https://ownrecord.io/docs/reference/errors.md#internal_error).