> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vertracloud.app/llms.txt
> Use this file to discover all available pages before exploring further.

# List Sessions

> Lists the authenticated user's active login sessions.

### Response

<ResponseField name="response" type="array">
  An array of active sessions.

  <Expandable title="Toggle object">
    <ResponseField name="id" type="string">
      The session ID.
    </ResponseField>

    <ResponseField name="user_id" type="string">
      The owning user's ID.
    </ResponseField>

    <ResponseField name="provider" type="string">
      How the session was created (e.g. `email`, `google`, `github`).
    </ResponseField>

    <ResponseField name="ip_address" type="string | null">
      The IP address the session was created from, if known.
    </ResponseField>

    <ResponseField name="location" type="string | null">
      A coarse location derived from the IP, if known.
    </ResponseField>

    <ResponseField name="device" type="string | null">
      A description of the device/browser, if known.
    </ResponseField>

    <ResponseField name="expires_at" type="string" format="date-time">
      When the session expires.
    </ResponseField>

    <ResponseField name="created_at" type="string" format="date-time">
      When the session was created.
    </ResponseField>

    <ResponseField name="updated_at" type="string" format="date-time">
      When the session was last used.
    </ResponseField>

    <ResponseField name="is_current" type="boolean">
      Whether this is the session tied to the credential making the current request.
    </ResponseField>
  </Expandable>
</ResponseField>

<ResponseExample>
  ```json Response theme={null}
  {
    "response": [
      {
        "id": "session-abc123",
        "user_id": "user-123456789012345678",
        "provider": "email",
        "ip_address": "203.0.113.10",
        "location": "Fortaleza, BR",
        "device": "Chrome on macOS",
        "expires_at": "2026-10-20T15:00:00.000Z",
        "created_at": "2026-09-20T15:00:00.000Z",
        "updated_at": "2026-09-21T09:00:00.000Z",
        "is_current": true
      }
    ]
  }
  ```
</ResponseExample>

### Error Responses

<ResponseField name="code" type="string">
  The error code indicating the reason for failure. Possible values:

  * `UNAUTHORIZED`: The user is not authenticated.
  * `USER_NOT_FOUND`: The authenticated user was not found.
  * `INTERNAL_SERVER_ERROR`: An unexpected server error occurred.
</ResponseField>

<ResponseExample>
  ```json Error Response (401) theme={null}
  {
    "code": "UNAUTHORIZED"
  }
  ```
</ResponseExample>

<Note>
  Revoking a session is a dashboard-only action — it isn't reachable with an API key.
</Note>