---
title: "List personal access tokens"
method: GET
path: "/user/tokens"
---

# List personal access tokens

`GET /user/tokens`

Returns a list of tokens for the authenticated user

## Response `200`

OK

- Token[]
  - `id` string, uuid, required — The ID of the token.
  - `description` string, nullable — The description of the token.
  - `userId` string, uuid, required — The ID of a user.
  - `type` 'web' | 'device' | 'personal', required — The type of token.
  - `expiresAt` string, date-time, nullable — The date and time when the token expires.
  - `permissions` Permission[], nullable
    - union
      - object
        - `permission` 'package/publish', required — The permission name.
        - `scope` string, required — The name of a scope. This must not be @ prefixed.
      - object
        - `permission` 'package/publish', required — The permission name.
        - `scope` string, required — The name of a scope. This must not be @ prefixed.
        - `package` string, required — The name of a package.
      - object
        - `permission` 'package/publish', required — The permission name.
        - `scope` string, required — The name of a scope. This must not be @ prefixed.
        - `package` string, required — The name of a package.
        - `version` string, required — A semantic version.
        - `tarballHash` string, required — The SHA256 hash of the tarball.
  - `updatedAt` string, date-time, required — The date and time when the token was last updated.
  - `createdAt` string, date-time, required — The date and time when the token was created.

## Other responses

- `401` — Unauthorized

---

[API](https://skmtc.net/deno/apis/jsr.md) · [All operations](https://skmtc.net/deno/apis/jsr/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/deno/jsr/versions/3d37ac9b68f7/schema)