List access tokens

Returns a list of all access tokens. The response does not include the raw token values.

Requires auth_enabled=true and an admin access token or admin JWT.

Timestamps are returned as RFC 3339 UTC strings. When will_expire is false, expired_at is null.

GET /auth/access_tokens

List access tokens

cURL

curl -X GET http://localhost:6575/auth/access_tokens \
  -H "Accept: application/json" \
  -H 'Authorization: Bearer <admin-jwt-or-access-token>'

200

[
  {
    "id": 12,
    "name": "reader-admin-token",
    "description": "Used by the analytics dashboard to run read-only admin checks.",
    "created_at": "2026-04-02T08:30:00Z",
    "expired_at": "2026-04-03T08:30:00Z",
    "will_expire": true,
    "permission": "read,admin"
  },
  {
    "id": 13,
    "name": "writer-token",
    "description": "Used by the nightly import job.",
    "created_at": "2026-04-02T09:00:00Z",
    "expired_at": null,
    "will_expire": false,
    "permission": "write"
  }
]

Authorizations

Authorization · string · header · required

Admin JWT obtained from the login endpoint.

Headers

Authorization · string · required

Admin JWT or admin access token. Format Bearer <admin-jwt-or-access-token>.

Response

200

application/json

List of access tokens.

id · integer

Unique identifier for the access token.

name · string

Human-readable name for the token.

description · string

Description of the token's intended use.

created_at · string<date-time>

Timestamp when the token was created, in RFC 3339 UTC format.

expired_at · string<date-time> | null

Timestamp when the token expires. null when will_expire is false.

will_expire · boolean

Whether the token has an expiration date.

permission · string

Comma-separated permission names assigned to the token.