---
title: "List devices – Superbot API"
canonical_url: "https://superbot.gg/developers/devices/listDevices"
summary: "The devices paired to this account, oldest first, paged by device id. `online` filters on presence (seen within the last two minutes). Revoked devices are not listed."
---

> Markdown of https://superbot.gg/developers/devices/listDevices. Site index: /llms.txt.

# List devices

`GET /v1/devices`

The devices paired to this account, oldest first, paged by device id. `online` filters on presence (seen within the last two minutes). Revoked devices are not listed.

- Operation id: `listDevices`
- Group: [Devices](https://superbot.gg/developers/devices.md)
- Auth: A caller key holding `devices:read` (`Authorization: Bearer sbc_…` or `x-api-key: sbc_…`), or a signed-in session.
- Scopes: `devices:read`

## Query parameters

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `limit` | integer | optional | Items per page, 1-100. |
| `after_id` | string | optional | Return the page after this resource id (the previous page’s `last_id`). |
| `before_id` | string | optional | Return the page before this resource id (the next page’s `first_id`). |
| `online` | string | optional | Only devices that are (`true`) or are not (`false`) online now. One of `true`, `false`. |

## Response 200

A page of devices.

`application/json`: DeviceList.

- `object` (string, required): One of `list`.
- `data` (array of Device, required)
  - `id` (string, required)
  - `object` (string, required): One of `device`.
  - `kind` (string, required)
  - `label` (string, required)
  - `fingerprint` (string, required)
  - `created_at` (string, required)
  - `last_seen_at` (string | null, required)
  - `online` (boolean, required)
  - `capabilities` (object)
    - `tools_count` (integer, required)
    - `hub_port` (integer)
    - `helper_version` (string)
    - `held_vendors` (array of string, required)
    - `held_models` (array of string, required)
  - `agent` (AgentDeviceFacet): Present only on a Device of kind `agent_computer`.
    - `agent_vendor` (string, required): The agent VM vendor, as it declared itself at link time. `generic` is any other agent. One of `grok-bot`, `muse`, `dots`, `manus`, `cursor-cloud`, `devin`, `replit`, `genspark`, `kimi`, `generic`.
    - `tier` (string, required): `link`: terminal and relay only. `data`: link plus the synced data the linking app granted. One of `link`, `data`.
    - `state` (string, required): `online`: polling now. `asleep`: suspended by its vendor (jobs wait `queued_asleep`). `offline`: not seen recently. One of `online`, `asleep`, `offline`.
    - `expires_at` (string, required): The next lifecycle deadline (ISO 8601), the one `expiry_kind` names. Warned 3 days ahead.
    - `expiry_kind` (string, required): `data_idle`: 14 days idle drops the data tier to link. `reconfirm`: the 90-day re-confirm is due (missed: link tier). `link_idle`: 30 days idle unlinks it. One of `data_idle`, `reconfirm`, `link_idle`.
    - `reconfirm_due_at` (string | null, required): When the data tier must be re-confirmed (POST /me/devices/{device_id}/agent-reconfirm); null at the link tier.
  - `key` (string): Whether this device holds the account's current end-to-end encryption key, from its own last report. `linked`: it holds the current key. `not_linked`: it holds none (it can still add logins, which reach the other devices). `out_of_date`: it holds an older or a different key. `unknown`: it has not reported, or the account has no key yet. Absent on a device that holds no key (an agent computer, an API key, an MCP connector, the cloud computer, a web browser: browsers never hold the key). A desktop app reports through its Helper (`custody_via`). One of `linked`, `not_linked`, `out_of_date`, `unknown`.
  - `custody_via` (string): The id of the device whose key this one uses (a desktop app names its Helper); `key` is that device's state. Absent when the device holds its own.
  - `created_via` (string): Present only on a Device of kind `agent_computer`. `app_link`: linked through the app-minted link, so the vendor was recorded by the app and may be shown as verified. `device_code`: the agent claimed its own vendor at a device-code approval, so show it as unverified. A missing value is `device_code`. One of `app_link`, `device_code`.
- `has_more` (boolean, required)
- `first_id` (string | null, required): Id of the first item on this page; pass as `before_id` for the previous page.
- `last_id` (string | null, required): Id of the last item on this page; pass as `after_id` for the next page.

## Errors

Every refusal carries `error`, `message`, `doc_url` and `request_id`; the gateway routes answer in the dialect you dialed.

| Status | Codes | When |
| --- | --- | --- |
| 400 | [`invalid_request`](https://superbot.gg/developers#errors-invalid_request) | The request is malformed or a parameter is invalid; `param` names the field. |
| 401 | [`unauthorized`](https://superbot.gg/developers#errors-unauthorized) | The bearer is missing, malformed or unknown. |
| 403 | [`insufficient_scope`](https://superbot.gg/developers#errors-insufficient_scope) | The key lacks a scope (insufficient_scope), is revoked, or may not call this route. |
| 429 | [`rate_limited`](https://superbot.gg/developers#errors-rate_limited) | Over the per-key request bucket; retry after x-ratelimit-reset. |

## Examples

```sh
curl -sS -X GET "https://superbot.gg/v1/devices" \
  -H "Authorization: Bearer $SUPERBOT_API_KEY"
```

```js
const res = await fetch(`https://superbot.gg/v1/devices`, {
  method: 'GET',
  headers: {
    Authorization: `Bearer ${process.env.SUPERBOT_API_KEY}`,
  },
});
console.log(res.status, await res.json());
```

```python
import os
import requests

res = requests.request(
    "GET",
    "https://superbot.gg/v1/devices",
    headers={
        "Authorization": f"Bearer {os.environ['SUPERBOT_API_KEY']}",
    },
)
print(res.status_code, res.json())
```