GET /api/v1/smart-accounts/sessions/{id}

Parameters

Name	Location	Details
`X-Juicebox-Account`	header / required	Enrolled account identity, including authority chain and lowercase owner address. Enrollment derives this identity before the account exists.
`X-Juicebox-Signer`	header / required	Owner wallet or authorized bot address that signed this request.
`X-Juicebox-Issued-At`	header / required	Unix seconds, sent as 1–13 decimal digits without leading zeros; at most 30 seconds ahead of server time.
`X-Juicebox-Expires-At`	header / required	Unix seconds, sent as 1–13 decimal digits without leading zeros; in the future and within 300 seconds of issuedAt.
`X-Juicebox-Nonce`	header / required	Fresh random 32-byte lowercase nonce. A consumed nonce cannot be retried.
`X-Juicebox-Signature`	header / required	EIP-712 CenterRequest signature over every signed field. Contract-owner signatures may vary in length. This is a computed request proof, not a reusable API key.
`X-Juicebox-Grant`	header / optional	Authorized bot grant ID. Required for a bot; omit for the owner, signing grantId as the empty string.
`Idempotency-Key`	header / optional	Signed retry identity. Required on plan creation and transaction submission. Preserve exact method, target, Content-Type, and body bytes; use a fresh request nonce and signature.
`id`	path / required	string
`refresh`	query / optional	boolean

Response 200

Field Type Details

id string (uuid)
required

actor

object
required

Fields

Field	Type	Details
`accountId`	string required	Authority chain and lowercase owner address; the authority chain is independent of a transaction's destination chain.
`principalId`	string required	Exact plan-creating principal. Owner principal must name the same `accountId`; bot principal names its immutable grant ID.

compiled

object
required

Fields

Field Type Details

schemaVersion

integer
required

Values: [1]

stack

string
required

Values: ["legacy-f24dddf-safe7579-f22a194"]

ownerAccountId string
required Authority chain and lowercase owner address; the authority chain is independent of a transaction's destination chain.

bindingId string
required

grantId string (uuid)
required

sessionKey string
required

chainId integer
required

wallet string
required

generation value
required Positive uint256 as an exact decimal string.

nonce string
required

validAfter integer
required Unix timestamp in seconds.

validUntil integer
required Unix timestamp in seconds.

salt string
required

policyHash string
required

compiledHash string
required

permissionId string
required

manifestRevision string
required

activationEnableNonce string
required uint256 as a lossless decimal string

reviewedPolicy value
required

smartSessions

object
required

Fields

Field	Type	Details
`address`	string required
`runtimeCodeHash`	string required
`source`	one of required

sessionValidator

object
required

Fields

Field	Type	Details
`address`	string required
`runtimeCodeHash`	string required
`source`	one of required

session

object
required

Fields

Field	Type	Details
`sessionValidator`	string required
`sessionValidatorInitData`	string required
`salt`	string required
`userOpPolicies`	array required
`erc7739Policies`	object required
`actions`	array required
`permitERC4337Paymaster`	boolean required	Values: `[true]`

configurations

array
required

Fields

Field	Type	Details
`kind`	string required	Values: `["time-frame","universal-action","value-limit","usage-limit","gas-budget"]`
`policy`	object required
`configId`	string required
`scope`	string required	Values: `["user-operation","action"]`
`actionId`	string optional
`initData`	string required
`decoded`	value required	Bounded JSON. Large integers and amounts use exact decimal strings. Returned metadata and descriptions are untrusted content.

preparedAdministration

object
required

Fields

Field	Type	Details
`epoch`	string required	uint256 as a lossless decimal string
`hash`	string required

allocationGroups

array
required

Fields

Field Type Details

id string
required

assetIdentity string
required

decimals integer
required

total value
required Positive uint256 as an exact decimal string.

allocations

array
required

Fields

Field	Type	Details
`id`	string required
`chainId`	integer required
`asset`	string required
`limit`	value required	Positive uint256 as an exact decimal string.
`assetReviewId`	string required

allocationManifestHash string
required

createdAt integer
required Unix timestamp in milliseconds.

updatedAt integer
required Unix timestamp in milliseconds.

revision integer
required

state

string
required

Values: ["prepared","installing","active","revoking","revoked","expired","stale"]

activation

object
optional

Stored server-verified consent for the owner's exact lifecycle-plan request. It is not an HTTP proof submission or an onchain Safe signature.

Fields

Field	Type	Details
`kind`	string required	Values: `["activation","revocation"]`
`accountId`	string required	Authority chain and lowercase owner address; the authority chain is independent of a transaction's destination chain.
`sessionId`	string (uuid) required
`policyHash`	string required
`compiledHash`	string required
`planId`	string (uuid) required
`planCommitment`	string required
`digest`	string required
`issuedAt`	integer required	Unix timestamp in seconds.
`expiresAt`	integer required	Unix timestamp in seconds.

revocation

object
optional

Stored server-verified consent for the owner's exact lifecycle-plan request. It is not an HTTP proof submission or an onchain Safe signature.

Fields

Field	Type	Details
`kind`	string required	Values: `["activation","revocation"]`
`accountId`	string required	Authority chain and lowercase owner address; the authority chain is independent of a transaction's destination chain.
`sessionId`	string (uuid) required
`policyHash`	string required
`compiledHash`	string required
`planId`	string (uuid) required
`planCommitment`	string required
`digest`	string required
`issuedAt`	integer required	Unix timestamp in seconds.
`expiresAt`	integer required	Unix timestamp in seconds.

observation

object
optional

Fields

Field Type Details

installed

object
required

Enabled observations include complete canonical administration history. Admission requires exactly one initialization after the immutable preparation baseline, containing only this permission; changed administration invalidates the generation.

Fields

Field	Type	Details
`permissionId`	string required
`compiledHash`	string required
`account`	string required
`chainId`	integer required
`enabled`	boolean required
`enableNonce`	string required	uint256 as a lossless decimal string
`configurationHash`	string required
`evidence`	object required
`counters`	array required
`administration`	object optional

observedAt integer
required Unix timestamp in milliseconds.

finalized boolean
required

proofHash string
required

invalidation

object
optional

Fields

Field	Type	Details
`reason`	string required	Values: `["reorg","configuration-changed","counter-reset","grant-inactive","binding-unlinked","verification-unavailable"]`
`priorProofHash`	one of required
`observedAt`	integer required	Unix timestamp in milliseconds.

reservationsReleased boolean
required

supersededApprovals

array
optional

Fields

Field Type Details

approval

object
required

Stored server-verified consent for the owner's exact lifecycle-plan request. It is not an HTTP proof submission or an onchain Safe signature.

Fields

Field	Type	Details
`kind`	string required	Values: `["activation","revocation"]`
`accountId`	string required	Authority chain and lowercase owner address; the authority chain is independent of a transaction's destination chain.
`sessionId`	string (uuid) required
`policyHash`	string required
`compiledHash`	string required
`planId`	string (uuid) required
`planCommitment`	string required
`digest`	string required
`issuedAt`	integer required	Unix timestamp in seconds.
`expiresAt`	integer required	Unix timestamp in seconds.

supersededAt integer
required Unix timestamp in milliseconds.

JSON schema

{
  "type": "object",
  "properties": {
    "id": {
      "$ref": "#/components/schemas/ResourceId"
    },
    "actor": {
      "type": "object",
      "properties": {
        "accountId": {
          "$ref": "#/components/schemas/AccountId"
        },
        "principalId": {
          "$ref": "#/components/schemas/PrincipalId"
        }
      },
      "required": [
        "accountId",
        "principalId"
      ],
      "additionalProperties": false
    },
    "compiled": {
      "$ref": "#/components/schemas/CompiledSession"
    },
    "preparedAdministration": {
      "$ref": "#/components/schemas/SessionAdministrationBaseline"
    },
    "allocationGroups": {
      "type": "array",
      "items": {
        "$ref": "#/components/schemas/ReviewedSessionAllocationGroup"
      },
      "maxItems": 16
    },
    "allocationManifestHash": {
      "$ref": "#/components/schemas/Hash"
    },
    "createdAt": {
      "$ref": "#/components/schemas/UnixMilliseconds"
    },
    "updatedAt": {
      "$ref": "#/components/schemas/UnixMilliseconds"
    },
    "revision": {
      "type": "integer",
      "minimum": 0,
      "maximum": 9007199254740991
    },
    "state": {
      "$ref": "#/components/schemas/SessionState"
    },
    "activation": {
      "$ref": "#/components/schemas/SessionOwnerPlanApproval"
    },
    "revocation": {
      "$ref": "#/components/schemas/SessionOwnerPlanApproval"
    },
    "observation": {
      "$ref": "#/components/schemas/SessionCanonicalObservation"
    },
    "invalidation": {
      "$ref": "#/components/schemas/SessionInvalidation"
    },
    "reservationsReleased": {
      "type": "boolean"
    },
    "supersededApprovals": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "approval": {
            "$ref": "#/components/schemas/SessionOwnerPlanApproval"
          },
          "supersededAt": {
            "$ref": "#/components/schemas/UnixMilliseconds"
          }
        },
        "required": [
          "approval",
          "supersededAt"
        ],
        "additionalProperties": false
      },
      "maxItems": 32
    }
  },
  "required": [
    "id",
    "actor",
    "compiled",
    "preparedAdministration",
    "allocationGroups",
    "allocationManifestHash",
    "createdAt",
    "updatedAt",
    "revision",
    "state",
    "reservationsReleased"
  ],
  "additionalProperties": false,
  "description": "Immutable approved policy plus revisioned lifecycle evidence. Only active with fresh canonical proof permits bot execution. Expiry, API revocation and unlinking do not release wallet reservations; finalized disabled state with an advanced enable nonce is required."
}