1. Docs
  2. API Reference
  3. List the caller's remembered devices

List the caller's remembered devices

GET/v1/auth/mfa/trusted-devices

Lists the authenticated administrator's remembered devices as an { items } array: the browsers that asked to skip the challenge, with when each was remembered, last stood in for a sign-in, and expires. Scoped to the caller.

Authentication

Bearer TokenAuthorization

JWT access token. Never send alongside X-API-Key: a request carrying both is refused.

Responses

application/json

  • itemsUserMfaTrustedDeviceResponseDto[]*

application/json

  • errorApiErrorBodyDto*

application/json

  • errorApiErrorBodyDto*

Returned object

UserMfaTrustedDeviceResponseDtoView all properties on this resource
Request
curl -X GET "https://auth.canopy-io.com/v1/auth/mfa/trusted-devices" \
  -H "Authorization: Bearer $CANOPY_TOKEN"
Response
{
  "items": [
    {
      "id": "00000000-0000-0000-0000-000000000000",
      "label": "string",
      "ip_address": "string",
      "created_at": "2026-04-20T12:00:00.000Z",
      "last_seen_at": "2026-04-20T12:00:00.000Z",
      "expires_at": "2026-04-20T12:00:00.000Z"
    }
  ]
}
 Related endpoints
GETList the caller's enrolled second factors
POSTBegin authenticator app enrollment
POSTComplete authenticator app enrollment
POSTBegin passkey enrollment
POSTComplete passkey enrollment
POSTProve a fresh second factor before a sensitive change
POSTBegin a passkey step-up
POSTComplete a passkey step-up
DELETERemove one of the caller's second factors
GETHow many recovery codes the caller has left
POSTRegenerate the caller's recovery codes
DELETEForget every remembered device
DELETEForget one remembered device
 Was this page helpful?

Tell us how we can improve this guide.

Canopy