Skip to content
OpenRelay is in early access, and the /v1 API is stable. New capabilities ship in the changelog.
PricingDashboard
GuidesAPI ReferenceCLI
API ReferenceAccount and accessAccount

List your CLI sessions, every org (session only)

Lists every orl auth login session you hold across your orgs, with device name, creation, last use and expiry. Needs a signed-in user session. Sessions that expired or were revoked are listed too. An API key cannot call this: it cannot enumerate the user sessions that out-rank it.

Required permission

Requires the self.update permission. See Permissions for the roles and API key permissions that include it.

GET
/v1/me/cli-sessions

Authorization

apiKey
headerAuthorizationBearer <token>

OpenRelay API key. Send it as Authorization: Bearer or_… (legacy vl_… keys still work).

Response Body

The caller's CLI sessions

application/json
  1. response
sessions*array<>
Example Request
curl -X GET 'https://api.openrelay.inc/v1/me/cli-sessions'
Example Response
{  "sessions": [    {      "id": "string",      "orgId": "string",      "orgName": "string",      "deviceName": "string",      "createdAt": "2019-08-24T14:15:22Z",      "lastUsedAt": "2019-08-24T14:15:22Z",      "expiresAt": "2019-08-24T14:15:22Z",      "revokedAt": "2019-08-24T14:15:22Z"    }  ]}

Deny a pending device login (session only) POST

Marks the code denied; the polling CLI gets access_denied and stops. Irreversible for that code (a fresh `orl auth login` starts a new one).

Revoke one of your CLI sessions (session only) DELETE

Revokes one of your CLI sessions; it stops working on the next request to the API or the inference gateway. orl auth logout calls this. Both the control plane and the inference gateway check revocation on every request, with no cache to wait out. Revoking an already revoked session answers 204 again; orl auth logout then deletes the credential locally.