---
title: Fetch device-flow request details for the approval page
description: Session-authed.
api_method: GET
api_path: "/v1/auth/cli/verify"
canonical_url: https://wiblo.app/docs/developers/api/cli/get-cli-verify
last_updated: 2026-07-28T17:31:44+02:00
md_url: https://wiblo.app/docs/developers/api/cli/get-cli-verify.md
---

# Fetch device-flow request details for the approval page

`GET /v1/auth/cli/verify`

Session-authed. The `/cli` dashboard page calls this with the `user_code` to render the approval prompt (client, user-agent, agent label). Missing/expired/already-resolved codes collapse onto stable error codes. Per-user rate-limited at 60/60s.

## Query parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `user_code` | `string` | Yes | The dashed user code from the CLI (e.g. `A1B2-C3D4`). |

## Request

**curl**

```bash
curl https://api.wiblo.app/v1/auth/cli/verify \
  -H "Authorization: Bearer $WIBLO_TOKEN"
```

**TypeScript**

```ts
import { createSdk, getCliVerify } from "@workspace/sdk"

const sdk = createSdk({ baseUrl: "https://api.wiblo.app" })

const { data, error } = await getCliVerify({
  client: sdk,
})
```

## Responses

**`200`** — The pending device-flow request details. Returns `VerifyDeviceCodeResponse`.

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| `user_code` | `string` | Yes |  |
| `client_id` | `string` | Yes |  |
| `user_agent` | `string \| null` | Yes |  |
| `agent_label` | `string \| null` | Yes |  |
| `scopes` | `array<string>` | Yes |  |
| `expires_at` | `string` | Yes |  |
| `ip` | `string \| null` | Yes |  |

**`401`** — No valid Supabase session cookie was present. Returns `ApiErrorEnvelope`.

**`404`** — No device-flow request matches the `user_code` (`DEVICE_CODE_NOT_FOUND`). Returns `ApiErrorEnvelope`.

**`409`** — The device code has already been approved, denied, or consumed (`DEVICE_CODE_USED`). Returns `ApiErrorEnvelope`.

**`410`** — The device code has expired (`DEVICE_CODE_EXPIRED`). Returns `ApiErrorEnvelope`.

**`422`** — The `user_code` query param is missing or malformed (`INVALID_PARAMS`). Returns `ApiErrorEnvelope`.

**`429`** — Rate limit exceeded. The body's `error.code` is `RATE_LIMITED` and `error.details.retry_after` is the same number of seconds as the `Retry-After` header. Returns `ApiErrorEnvelope`.