List all attenuated (restricted) derivatives of a given root token. Returns the full tree of attenuated children, ordered by creation time.
Requires token:list capability.
Biscuit-based bearer token. Obtain tokens from the Adaptyv Portal or via the /tokens endpoint. Tokens encode organization membership and role-based capabilities; the API verifies the token's cryptographic signature and authorization claims before processing requests. Use /tokens/attenuate to create restricted tokens for delegation.
Root token's token_id (UUID from the Biscuit token_id fact)
List of attenuated children
Restrictions applied to this token.
When this attenuated token was created.
Database ID of this attenuated token record.
Human-readable label.
ID of the parent attenuated token (NULL if direct child of root).
Expiration of this attenuated token (may differ from parent).
When this token was revoked (NULL if active).