tokens
List all API tokens for a user
This endpoint returns a list of all API tokens associated with a user. Regular users can only see their own tokens, while administrators can view tokens for any user by providing the user_id parameter.
Use Cases
- Manage active API tokens
- Monitor token usage and expiration
- Audit API access for security
- Revoke compromised or unused tokens
Token Types
api
: Standard API tokens for programmatic accessservice
: Service account tokens for automated systems
Token Status
active
: Token is valid and can be usedexpired
: Token has passed its expiration daterevoked
: Token was manually revoked and cannot be used
Security Notes
- Token values are never returned in list operations
- Tokens are only shown once during creation
- Lost tokens cannot be recovered - create new ones
- Regularly rotate tokens for security
Best Practices
- Use descriptive names to identify token purpose
- Set expiration dates for temporary access
- Monitor
last_used
to identify unused tokens - Revoke tokens immediately if compromised
GET
Authorizations
Bearer authentication header of the form Bearer <token>
, where <token>
is your auth token.
Query Parameters
Filter tokens by user ID (admin only)
Response
200
application/json
Successfully retrieved token list
List of API tokens for a user
Returns all tokens created by or associated with a user, excluding the actual token values for security.