List active sign-in sessions
Every live sign-in across the workspace's members, newest first.
/v1/workspace/sessionsAdmin- Operation id
- list_sessions
- Access
- An editor or a viewer is refused.
/v1/workspace/sessionsEvery live sign-in across the workspace's members, newest first.
Use this to see where people are signed in and to spot a session that should not exist. Each row carries the member, the device it was created from, when it was created and when it expires.
Expired and revoked sessions are hidden. Pass include_revoked=true to see
them, which is what makes revoked_at in the response meaningful.
Tenancy: the request is scoped to one workspace, and the credential presented is what selects it. A caller with no membership in that workspace is refused with 404, which is indistinguishable from a workspace that does not exist.
Authorisation: admin or owner. An editor or viewer receives 403 insufficient_role.
Access: Authorization: Bearer carrying either a realm access token or an API key. A key must hold the workspace-admin:write scope, and the workspace role of the person who owns it must meet the floor above.
A realm-issued access token, presented as Authorization: Bearer <token>. It acts as the person who signed in, and every operation resolves their workspace role live from the membership record.
In: header
Query Parameters
falseResponse Body
application/json
application/json
curl -X GET "https://example.com/v1/workspace/sessions"{}