> ## Documentation Index
> Fetch the complete documentation index at: https://docs.scute.io/llms.txt
> Use this file to discover all available pages before exploring further.

# List all M2M sessions for an app

> Retrieve all machine-to-machine sessions created for the given app



## OpenAPI

````yaml /swagger.json get /v1/apps/{app_id}/m2m/sessions
openapi: 3.0.1
info:
  title: Scute API
  version: v1
  description: API for managing users in Scute applications
servers:
  - url: https://{defaultHost}
    variables:
      defaultHost:
        default: api.scute.io
  - url: http://localhost:3333
    description: Development server
security:
  - apiSecret: []
    userAccess: []
paths:
  /v1/apps/{app_id}/m2m/sessions:
    parameters:
      - name: app_id
        in: path
        required: true
        description: App ID
        schema:
          type: string
    get:
      tags:
        - M2M Sessions
      summary: List all M2M sessions for an app
      description: Retrieve all machine-to-machine sessions created for the given app
      operationId: listM2mSessions
      responses:
        '200':
          description: successful
          content:
            application/json:
              schema:
                type: object
                properties:
                  sessions:
                    type: array
                    description: Collection of active and inactive M2M token sessions
                    items:
                      type: object
                      properties:
                        id:
                          type: string
                          description: Token session identifier
                        client_name:
                          type: string
                          nullable: true
                          description: Client label associated to the session
                        display_name:
                          type: string
                          nullable: true
                          description: Display name for the session
                        status:
                          type: boolean
                          description: Session is currently active
                        type:
                          type: string
                          description: Token session type
                        access_expiration:
                          type: string
                          format: date-time
                          nullable: true
                          description: When the long-lived access token expires
                        refresh_expiration:
                          type: string
                          format: date-time
                          nullable: true
                          description: >-
                            Refresh token expiration if refresh tokens are
                            issued
                        created_at:
                          type: string
                          format: date-time
                          description: Timestamp when the session was created
                        updated_at:
                          type: string
                          format: date-time
                          description: Timestamp when the session was last updated
                        last_used_at:
                          type: string
                          format: date-time
                          nullable: true
                          description: Last time this session was used
                        last_used_at_ip:
                          type: string
                          nullable: true
                          description: IP address that last used the session
                        user_agent:
                          type: string
                          nullable: true
                          description: Full user agent captured when the session was used
                        browser:
                          type: string
                          nullable: true
                          description: Parsed browser name and version if available
                        platform:
                          type: string
                          nullable: true
                          description: Parsed operating system if available
                        user_agent_shortname:
                          type: string
                          nullable: true
                          description: Short label derived from the user agent
                        nickname:
                          type: string
                          nullable: true
                          description: >-
                            Alias derived from the user agent for display
                            purposes
                      required:
                        - id
                        - status
                        - type
                        - created_at
                        - updated_at
                required:
                  - sessions
        '403':
          description: forbidden - API key not authorized for this app
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: API key not authorized for this app
                  error_code:
                    type: string
                    nullable: true
                required:
                  - error
        '404':
          description: not found - app does not exist
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: App not found
                  error_code:
                    type: string
                    example: app_not_found
                    nullable: true
                required:
                  - error
        '500':
          description: internal server error
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: Failed to fetch M2M sessions
                  error_code:
                    type: string
                    nullable: true
                required:
                  - error
      security:
        - apiSecret: []
components:
  securitySchemes:
    apiSecret:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: API Secret token
    userAccess:
      type: apiKey
      name: X-Authorization
      in: header
      description: User Access token

````