List the identity's active 'remember this device' records
/v1/identity/auth/mfa/trusted-devicesAuthentication
- Bearer Token
AuthorizationJWT access token
Code samples
curl -X GET "https://api.canopy.dev/v1/identity/auth/mfa/trusted-devices" \ -H "Authorization: Bearer $CANOPY_TOKEN"
const response = await fetch("https://api.canopy.dev/v1/identity/auth/mfa/trusted-devices", {
method: "GET",
headers: {
"Authorization": "Bearer $CANOPY_TOKEN"
},
});
const data = await response.json();import requests
response = requests.get(
"https://api.canopy.dev/v1/identity/auth/mfa/trusted-devices",
headers={
"Authorization": "Bearer $CANOPY_TOKEN"
},
)
data = response.json()package main
import (
"net/http"
)
func main() {
req, _ := http.NewRequest("GET", "https://api.canopy.dev/v1/identity/auth/mfa/trusted-devices", nil)
req.Header.Set("Authorization", "Bearer $CANOPY_TOKEN")
resp, _ := http.DefaultClient.Do(req)
defer resp.Body.Close()
}Responses
200 One row per active trusted device, ordered by `last_seen_at` descending. Cookie hashes are not echoed back.
{
"items": [
{
"id": "00000000-0000-0000-0000-000000000000",
"environment_id": "00000000-0000-0000-0000-000000000000",
"label": "string",
"ip_address": "string",
"created_at": "2026-04-20T12:00:00.000Z",
"last_seen_at": "2026-04-20T12:00:00.000Z",
"expires_at": "2026-04-20T12:00:00.000Z"
}
]
}application/json
itemsMfaTrustedDeviceResponseDto[]
401 Invalid or expired token
403 This token is not authorized for this endpoint (wrong principal type — e.g., admin token on identity-only endpoint, or vice versa)