One device

GET

/security/devices/{id}

The device in full, the sessions on it, and — for its owner — its last
50 audit lines. device:read for your own; with team, a member's
through device:manage-members. A device the caller may not see
answers 404 device_not_found, the same as one that does not exist.

Capability: none from the table; any signed-in account, about itself. Device:read, checked in the route.

Request

Path Params

Query Params

Responses

🟢200

application/json

The device

Bodyapplication/json

🟠401KlockUnauthorized

🟠403DeviceCapabilityMissing

🟠404DeviceNotFound

🔴502KlockServiceUnavailable

🔴503KlockUnconfigured

Response Example

200 - Example 1

{
    "device": {
        "id": "dev_7fK2mQ",
        "userUuid": "string",
        "teamUuid": "string",
        "kind": "interactive-host",
        "label": "string",
        "hostname": "string",
        "keyStore": "string",
        "platform": "string",
        "agentVersion": "string",
        "thumbprint": "string",
        "signPub": "string",
        "sealPub": "string",
        "sealBinding": "string",
        "deviceCert": "string",
        "status": "pending",
        "enrolledVia": "pair",
        "sessionId": "string",
        "syncSeq": 0,
        "lastSyncAt": "2019-08-24T14:15:22.123Z",
        "lastSyncCountry": "string",
        "providers": {},
        "wipeRequestedAt": "2019-08-24T14:15:22.123Z",
        "revokedAt": "2019-08-24T14:15:22.123Z",
        "revokeReason": "string",
        "createdAt": "2019-08-24T14:15:22.123Z",
        "updatedAt": "2019-08-24T14:15:22.123Z"
    },
    "sessions": [
        {
            "id": 0,
            "uuid": "string",
            "userAgent": "string",
            "ip": "string",
            "lastSeenAt": "2019-08-24T14:15:22.123Z",
            "expiresAt": "2019-08-24T14:15:22.123Z",
            "revokedAt": "2019-08-24T14:15:22.123Z",
            "current": true,
            "assumed": {
                "actorId": 0,
                "mode": "read"
            },
            "kind": "browser",
            "binding": "device",
            "device": {
                "id": "string",
                "label": "string"
            },
            "caps": [
                "string"
            ],
            "limits": {},
            "checkInBy": null,
            "stepUpAt": null,
            "label": "string",
            "clientName": "string",
            "subject": {
                "kind": "passwordless",
                "id": null
            },
            "frozen": {
                "at": "2019-08-24T14:15:22.123Z",
                "reason": "string"
            },
            "revokedReason": "string",
            "rotatedFromId": 0,
            "owner": {
                "id": 0,
                "username": "string"
            }
        }
    ],
    "audit": [
        {
            "id": 0,
            "at": "2019-08-24T14:15:22.123Z",
            "action": "string",
            "ok": true,
            "level": "string",
            "category": "string",
            "ip": "string",
            "detail": {},
            "actorId": 0
        }
    ]
}

Modified at 2026-10-05 04:04:32

Approve a new device's pairing code

Rename a device