List sessions started by an API key

Lists the sessions started with one API key, newest first. A session keeps the key that started it, even after a restart, a token refresh, or the key’s revocation. Callers with the developer or account_admin role may read their own account, including sessions started with other members’ keys.

A key with no sessions in your account returns an empty list, whether the key is unused, unknown, or belongs to another account. Sessions created before key tracking began are not listed. Results filter on creation time, not on usage in the window.

Results use cursor pagination. A page can be short or empty while has_more is still true; keep requesting until next_cursor is null. Keep the filters unchanged between pages. There is no total.

GET

accounts

{account_id}

api-keys

{api_key_id}

sessions

List sessions started by an API key

curl --request GET \
  --url https://api.reactor.inc/accounts/{account_id}/api-keys/{api_key_id}/sessions \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://api.reactor.inc/accounts/{account_id}/api-keys/{api_key_id}/sessions"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.reactor.inc/accounts/{account_id}/api-keys/{api_key_id}/sessions', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.reactor.inc/accounts/{account_id}/api-keys/{api_key_id}/sessions",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.reactor.inc/accounts/{account_id}/api-keys/{api_key_id}/sessions"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.reactor.inc/accounts/{account_id}/api-keys/{api_key_id}/sessions")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "sessions": [
    {
      "session_id": "7c9e6679-7425-40de-944b-e07fc1f90ae7",
      "user_id": "3b0d7a8d-1111-4444-9999-123456789abc",
      "created_by_api_key_id": "6f1d2c3b-4a5e-4f6d-8c7b-9a0e1f2d3c4b",
      "model": "reactor/helios",
      "state": "ACTIVE",
      "closed": false,
      "cluster": "054e2495-c685-450f-9ceb-57f185b7300a",
      "region": "us-west",
      "created_at": "2026-11-09T14:00:00Z",
      "updated_at": "2026-11-09T14:00:04Z",
      "recording_enabled": false
    }
  ],
  "limit": 50,
  "has_more": false,
  "next_cursor": null
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

Authorizations

Authorization

string

header

required

A Reactor API key (rk_...), sent as Authorization: Bearer rk_.... Keep it on a server.

Path Parameters

account_id

string<uuid>

required

The account's ID. Use the account_id from GET /me.

api_key_id

string<uuid>

required

The API key's ID, as returned when the key was created or listed.

Query Parameters

status

enum<string>

default:all

active for sessions not yet closed, past for closed sessions, all for both.

Available options:

all,

active,

past

after

string<date-time>

Inclusive lower bound on created_at, as an RFC 3339 timestamp. Dates without a time are rejected.

Example:

"2026-11-01T00:00:00Z"

before

string<date-time>

Exclusive upper bound on created_at, as an RFC 3339 timestamp. Must be later than after.

Example:

"2026-12-01T00:00:00Z"

limit

integer

default:50

Page size, from 1 to 200. Values outside that range return 400.

Required range: 1 <= x <= 200

cursor

string

The opaque next_cursor from the previous page. Omit it for the first page.

Response

A page of sessions.

sessions

object[]

required

Sessions in the list shape, without environment and revision.

Show child attributes

limit

integer

required

The page size applied.

has_more

boolean

required

Whether another page may exist.

next_cursor

string | null

required

Pass as cursor to get the next page. null on the last page.

⌘I

List sessions started by an API key

curl --request GET \
  --url https://api.reactor.inc/accounts/{account_id}/api-keys/{api_key_id}/sessions \
  --header 'Authorization: Bearer <token>'

import requests

url = "https://api.reactor.inc/accounts/{account_id}/api-keys/{api_key_id}/sessions"

headers = {"Authorization": "Bearer <token>"}

response = requests.get(url, headers=headers)

print(response.text)

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.reactor.inc/accounts/{account_id}/api-keys/{api_key_id}/sessions', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.reactor.inc/accounts/{account_id}/api-keys/{api_key_id}/sessions",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.reactor.inc/accounts/{account_id}/api-keys/{api_key_id}/sessions"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.reactor.inc/accounts/{account_id}/api-keys/{api_key_id}/sessions")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "sessions": [
    {
      "session_id": "7c9e6679-7425-40de-944b-e07fc1f90ae7",
      "user_id": "3b0d7a8d-1111-4444-9999-123456789abc",
      "created_by_api_key_id": "6f1d2c3b-4a5e-4f6d-8c7b-9a0e1f2d3c4b",
      "model": "reactor/helios",
      "state": "ACTIVE",
      "closed": false,
      "cluster": "054e2495-c685-450f-9ceb-57f185b7300a",
      "region": "us-west",
      "created_at": "2026-11-09T14:00:00Z",
      "updated_at": "2026-11-09T14:00:04Z",
      "recording_enabled": false
    }
  ],
  "limit": 50,
  "has_more": false,
  "next_cursor": null
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

{
  "error": "<string>",
  "message": "<string>",
  "resource": "<string>",
  "reason": "<string>"
}

Get started

SDK Reference

CLI Reference

Platform API Reference

Endpoints

List sessions started by an API key

Authorizations

Path Parameters

Query Parameters

Response