Returns the caller's own live sessions across every Workspace, newest
first. Revoked and expired sessions are omitted.
Sessions carry no IP address, user-agent, device name, or location.
None is stored, and adding it would reverse the data-minimization
decision in SECURITY-AUTH-001 that keeps network and client identity
out of session records and session events. Sessions are distinguished
by Workspace and last-seen time.
Query Parameters
cursor
string·min 1·max 2048
Opaque continuation cursor returned by the preceding page.
limit
integer·min 1·max 100·default 50
Maximum number of resources to return.
Header Parameters
X-Assign-Realtime-Baseline
string
Upcoming browser-session canonical read custody. The named private scope captures this response and a signed replay cursor in one snapshot. Successful responses include X-Assign-Realtime-Cursor and X-Assign-Realtime-Position. Apply all required retained state before acknowledging the corresponding socket checkpoint. Failed or incomplete baselines return no cursor.
Values
account_security
Responses
Cache-Control
string·const no-store
Prevents storage of error responses by clients and intermediaries.
X-Assign-Realtime-Cursor
string·max 4096
Signed scope/User/session-bound replay custody; only when the requested canonical baseline succeeds.
X-Assign-Realtime-Position
string
Decimal-string snapshot position; only with a successful baseline cursor.
itemsRequired
object[]
next_cursor
string·min 1·max 2048
Opaque, endpoint-specific pagination cursor.
has_moreRequired
boolean
Cache-Control
string·const no-store
Prevents storage of error responses by clients and intermediaries.
X-Request-ID
string·min 1·max 200
Correlation identifier for the request.
X-Content-Type-Options
string·const nosniff
Prevents user agents from MIME-sniffing the response.
errorRequired
object
Cache-Control
string·const no-store
Prevents storage of error responses by clients and intermediaries.
X-Request-ID
string·min 1·max 200
Correlation identifier for the request.
X-Content-Type-Options
string·const nosniff
Prevents user agents from MIME-sniffing the response.
errorRequired
object
Cache-Control
string·const no-store
Prevents storage of error responses by clients and intermediaries.
X-Request-ID
string·min 1·max 200
Correlation identifier for the request.
X-Content-Type-Options
string·const nosniff
Prevents user agents from MIME-sniffing the response.
errorRequired
object
Retry-After
integer·min 0
Delay in seconds before retrying, when an expected maintenance end is known.
Cache-Control
string·const no-store
Prevents storage of error responses by clients and intermediaries.
X-Request-ID
string·min 1·max 200
Correlation identifier for the request.
X-Content-Type-Options
string·const nosniff
Prevents user agents from MIME-sniffing the response.
