---
title: "List access tokens"
method: GET
path: "/api/v2/user/accesstoken"
tags: ["User"]
---

# List access tokens

`GET /api/v2/user/accesstoken`

Returns all non-expired long-lived access tokens for the authenticated user.
Results are paginated using cursor-based pagination. Use the `prevId` query
parameter with the `nextBatchPrevId` value from the previous response to fetch
the next page. The default page size is server-configured (currently 100);
maximum is 200.

## Query parameters

- `limit` string, number
- `prevId` string
- `sort` 'ASC' | 'DESC'

## Response `200`

OK

- ListAccessTokensResponse
  - `accessTokens` object[], required
    - `id` string, required
    - `isExtensible` boolean, required
    - `adminScope` 'read' | 'full'
    - `bitgoAdminPermissions` string[]
    - `client` string
    - `created` string, date-time
    - `enterprise` string
    - `expires` string, date-time
    - `extensionAddress` string
    - `ip` string, ipv4 — IP address of the client that requested this access token
    - `ipRestrict` string[]
    - `label` string
    - `origin` string — BitGo environment that issued this token
    - `token` string
    - `scope` string[]
    - `unlock` object
      - `spendingLimits` object
      - `allErc20TokensLimit` AllErc20TokenLimit
        - `enabled` boolean, required — Indicates if the limit is enabled for all ERC20 tokens
        - `txCount` number, required — The transaction count limit for all ERC20 tokens
        - `txValue` string, required — The transaction value limit for all ERC20 tokens
        - `txValueLimitInSmallUnits` string — The transaction value limit in small units for all ERC20 tokens
        - `maxLimit` boolean — Indicates if the maximum limit is enabled
      - `expires` string, date-time
      - `time` string, date-time
      - `txCount` number
      - `txValue` number
      - `txValueLimit` number
    - `user` string
    - `oauth` object
      - `oauthRequired` boolean
      - `expires` string, date-time
    - `isMobileAccessToken` boolean — Flag indicating if this token was created via mobile session endpoint
  - `nextBatchPrevId` string

## Other responses

- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden

---

[API](https://skmtc.net/bitgo/apis/bitgo-api.md) · [All operations](https://skmtc.net/bitgo/apis/bitgo-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bitgo/bitgo-api/revisions/e445c15e5bee/schema)