List admin sessions.
curl --request GET \ --url https://auth.example.com/api/admin/sessions \ --header 'Authorization: Bearer <token>'List persisted user sessions for the current tenant, optionally filtered by user and active or expired status. User contact information is read from each account’s owning data store, including suspended and locked accounts. If the owner required to audit disclosed personal session fields cannot be verified, the request returns an error without disclosing those fields. Page must be a positive safe integer and limit an integer from 1 to 500; malformed values or an unsafe pagination offset return 400 invalid_request. Contacts are resolved from the current verified tenant inventory only. Accounts outside that inventory, or without verified personal data ownership, have null contact fields; unrelated default stores are never used. A database read failure fails the entire request rather than returning a partial successful page.
Authorizations
Section titled “Authorizations ”Parameters
Section titled “ Parameters ”Header Parameters
Section titled “Header Parameters ”Tenant selector for multi-tenant admin requests.
Query Parameters
Section titled “Query Parameters ”Responses
Section titled “ Responses ”User session list response.
object
object
object
Example
{ "sessions": [ { "id": "sess_123", "user_id": "user_123", "user_email": "user@example.com", "user_name": "Example User", "created_at": "2026-06-19T00:00:00.000Z", "last_accessed_at": "2026-06-19T00:10:00.000Z", "expires_at": "2026-06-20T00:00:00.000Z", "ip_address": "203.0.113.10", "user_agent": "Mozilla/5.0", "is_active": true } ], "pagination": { "page": 1, "limit": 20, "total": 1, "totalPages": 1, "hasNext": false, "hasPrev": false }}Error response.
object
Example generated
{ "error": "example", "message": "example", "error_description": "example"}Error response.
object
Example generated
{ "error": "example", "message": "example", "error_description": "example"}