---
title: "List API tokens of a user"
method: GET
path: "/api/v1/user/{username}/api_token"
tags: ["API token"]
---

# List API tokens of a user

`GET /api/v1/user/{username}/api_token`

Token values are never returned, only their metadata.

## Path parameters

- `username` string, required

## Response `200`

All API tokens of the user.

- ApiTokenInfo[]
  - `created_at` string, date-time, required
  - `id` integer, required
  - `name` string, required

## Other responses

- `401` — Session is missing or invalid.
- `403` — Requires admin privileges and an active enterprise license.
- `404` — User not found.
- `500` — Unable to list API tokens.

---

[API](https://skmtc.net/defguard/apis/defguard-core-api.md) · [All operations](https://skmtc.net/defguard/apis/defguard-core-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/defguard/defguard-core-api/revisions/8e7246070380/schema)