Active sandbox sessions. Metadata only. Never the token. Not MCP.

GET/v1/sessions

Authorization

AuthorizationBearer token (JWT) · headerrequired

Hydra JWT. Identity is the bound agent or a Keto member human. The host is not identity.

Responses

200Sessions

sessionsSession[]required

Show properties

Array of Session

idstringrequired

org_idstringrequired

agent_idstringrequired

expires_atstring<date-time>required

created_atstring<date-time>required

revoked_atstring<date-time> | null

renewed_atstring<date-time> | null

ttlintegerrequired

Initial lease duration in seconds.

max_ttlintegerrequired

Maximum cumulative lifetime in seconds.

max_usesintegerrequired

Maximum successful Use calls. 0 = unlimited.

usesintegerrequired

Use calls that passed authorization and reached upstream consumption.

401missing or invalid Bearer

403not owner

Request

curl -X GET "https://veil.nyc/v1/sessions" \
  -H "Authorization: Bearer YOUR_TOKEN"

const response = await fetch("https://veil.nyc/v1/sessions", {
  method: "GET",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN"
  }
});

import requests

response = requests.get(
    "https://veil.nyc/v1/sessions",
    headers={
        "Authorization": "Bearer YOUR_TOKEN"
    },
)

Response

{
  "sessions": [
    {
      "id": "string",
      "org_id": "string",
      "agent_id": "string",
      "expires_at": "2024-01-01T00:00:00Z",
      "created_at": "2024-01-01T00:00:00Z",
      "revoked_at": "2024-01-01T00:00:00Z",
      "renewed_at": "2024-01-01T00:00:00Z",
      "ttl": 0,
      "max_ttl": 0,
      "max_uses": 0,
      "uses": 0
    }
  ]
}