Skip to content

List Tokens

GET
/tokens
curl --request GET \
--url 'https://example.com/tokens?include_expired=false'

List the tokens the caller may manage (DESIGN decision 75).

A session (a signed-in person) or an admin-scoped token sees every token of its own user; any other token — an agent’s — sees only itself. Dead tokens (expired, revoked, idle-timed-out sessions) are hidden by default; include_expired reveals the rows retained as audit/attribution anchors (DESIGN §9).

include_expired
Include Expired
boolean

Successful Response

Media typeapplication/json
Response List Tokens Tokens Get
Array<object>
TokenOut
object
created_at
required
Created At
string format: date-time
expires_at
required
Any of:
string format: date-time
id
required
Id
string format: uuid
is_current
Is Current
boolean
kind
required
Kind
string
last_used_at
required
Any of:
string format: date-time
name
required
Name
string
scopes
required
Scopes
Array<string>

Example

[
{
"is_current": false
}
]

Validation Error

Media typeapplication/json
HTTPValidationError
object
detail
Detail
Array<object>
ValidationError
object
ctx
Context
object
input
Input
loc
required
Location
Array
msg
required
Message
string
type
required
Error Type
string

Example generated

{
"detail": [
{
"ctx": {},
"input": "example",
"loc": [
"example"
],
"msg": "example",
"type": "example"
}
]
}