Account

List the calling user's devices

GET/account/devices
account:readlist_account_devicesRead-only

Lists the push-notification devices the calling user has registered and not deactivated, newest first, and returns one page. Another user's devices are never listed. The push token is never returned. Changes nothing.

Query parameters

  • limitinteger#

    Page size (1–100). Defaults to 25; values are clamped to the range.

    Default: 25
  • cursorstring#

    Opaque pagination cursor taken from a prior response's meta.next_cursor.

  • fieldsstring#

    Comma-separated top-level fields to return. id is always returned.

  • sortstring#

    Comma-separated fields to sort by: only created_at is allowed. Prefix it with - for descending. Defaults to -created_at. The device id is always the final tiebreak.

Responses

200

One page of devices.

AccountDevice[]
{
  "data": [
    {
      "id": "9a9d1c5e-4f2b-4c8e-9a7d-2f1e6b3c4d5a",
      "device_id": "string",
      "device_type": "ios",
      "device_name": "string",
      "app_version": "string",
      "last_used_at": "2026-06-12T10:00:00+00:00",
      "created_at": "2026-06-12T10:00:00+00:00"
    }
  ],
  "meta": {
    "limit": 1,
    "next_cursor": "string",
    "prev_cursor": "string"
  }
}
401

Authentication failed. error.code is one of invalid_token, expired, revoked.

Error
403

Authorization failed. error.code is one of org_disabled, ip_blocked, missing_scope, scope_disabled, user_disabled.

Error
404

Resource not found (error.code = not_found).

Error
422

The request can't be processed (HTTP 422): validation_failed with one ErrorDetail per problem, or a code documented on the operation.

Error
429

Rate limit exceeded (error.code = rate_limited).

Error

Examples

curl https://your-org-domain/kong/core/api/v2/account/devices\
  -H "Authorization: Bearer $HELM_API_KEY"\
  -H "Content-Type: application/json"