Users

users_sessions_get

Read one end-user session in full: its status, device metadata, both expiries, the assurance level and factors it was established with, why it was revoked if it was, and the operator behind it if it is an impersonated session.

Tool

users_sessions_get

Behavior

HTTP: GET /users/sessions/:sessionId

Arguments

Name	Type	Required	Description
sessionId	string	•	The session to read.

Response

Field	Type	Always	Description
id	string	•
ip	string	•
aal	string	•	`aal2` only if a verified second factor completed.
amr	array	•	The factors this session was established with.
status	string	•
userId	string	•
createdAt	string	•
expiresAt	string	•
revokedAt	string	•
userAgent	string	•
revokedReason	string	•
impersonatedBy	string	•	The operator behind an impersonated session, or null for an ordinary one.
lastRefreshedAt	string	•
absoluteExpiresAt	string	•

Try it

Read one end-user session in full: its status, device metadata, both expiries, the assurance level and factors it was established with, why it was revoked if it was, and the operator behind it if it is an impersonated session.

When to use

Example

Ask your agent something like this:

Read one end-user session in full: its status, device metadata, both expiries, the assurance level and factors it was established with, why it was revoked if it was, and the operator behind it if it is an impersonated session.

The agent will invoke users_sessions_get with these arguments:

{
  "sessionId": "<sessionId>"
}