---
title: "Get Device"
method: GET
path: "/api/v1/iam/personal_devices/{device_id}"
tags: ["Personal Device"]
---

# Get Device

`GET /api/v1/iam/personal_devices/{device_id}`

GetDevice retrieves a single device (by device_id) with its child clients.

## Path parameters

- `device_id` string, required — The device identity (a base64url-encoded SHA-256 thumbprint of the device root key).

## Response `200`

Successful response

- C1ApiIamV1PersonalDeviceServiceGetDeviceResponse — The PersonalDeviceServiceGetDeviceResponse message.
  - `device` C1ApiIamV1PersonalDevice — PersonalDevice is one physical device with its app clients. The device identity is a stable thumbprint of the device's root signing key; the root key never authenticates an app — each client uses its own key.
    - `createdAt` string, date-time, nullable
    - `deviceId` string — The stable device identity: a base64url-encoded SHA-256 thumbprint of the device's root public signing key.
    - `deviceOs` string — The device operating system, e.g. "macos-14.5".
    - `deviceSurface` string — The device surface, e.g. "macos-desktop".
    - `displayName` string — The human-friendly device label, defaulted from the first app's name at registration. Devices are listed sorted by this name. Mutable via UpdateDevice.
    - `status` 'PERSONAL_DEVICE_STATUS_UNSPECIFIED' | 'PERSONAL_DEVICE_STATUS_ACTIVE' | 'PERSONAL_DEVICE_STATUS_REVOKED' — The device's lifecycle status. Revoked devices are retained for audit and are returned by Search only when the status filter requests them.
    - `updatedAt` string, date-time, nullable
    - `userId` string — The ID of the user this device is bound to (the approving user).

---

[API](https://skmtc.net/conductorone/apis/c1-api.md) · [All operations](https://skmtc.net/conductorone/apis/c1-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/conductorone/c1-api/revisions/f2cf3228f366/schema)