---
title: "List honeytokens"
method: GET
path: "/v1/honeytokens"
tags: ["Honeytokens"]
---

# List honeytokens

`GET /v1/honeytokens`

This endpoint allows you to list all the honeytokens of your workspace.

The response contains the list of honeytokens and a pagination cursor to retrieve the next page.

The honeytokens are sorted by id.

If you are using a personal access token, you need to have an access level superior or equal to `manager`.

## Query parameters

- `cursor` string
- `per_page` integer
- `status` 'triggered' | 'active' | 'revoked' — Status of a honeytoken.
- `type` 'AWS' — Type of a honeytoken.
- `search` string — Search honeytokens based on their name and/or description.
- `creator_id` number — Member id of the honeytoken creator.
- `revoker_id` number — Member id of the honeytoken revoker.
- `creator_api_token_id` string — Token id of the honeytoken creator.
- `revoker_api_token_id` string — Token id of the honeytoken creator.
- `tags` string — Comma-separated list of tags to filter on.
- `ordering` 'created_at' | '-created_at' | 'triggered_at' | '-triggered_at' | 'revoked_at' | '-revoked_at' | 'name' | '-name'
- `show_token` boolean — Show token details (`access_token_id` and `secret_key`).

## Headers

- `X-Privacy-Mode` 'true' | 'false'

## Response `200`

List honeytokens

- object[]
  - `id` string, uuid
  - `name` string
  - `description` string
  - `created_at` string, date-time — Creation date of the honeytoken
  - `gitguardian_url` string
  - `status` 'active' | 'triggered' | 'revoked' — Status of the honeytoken.
  - `triggered_at` string, date-time — Date when the honeytoken was switched from active to triggered the last time
  - `revoked_at` string, date-time — Date when the honeytoken was revoked
  - `open_events_count` integer
  - `type` 'AWS' — Type of the honeytoken.
  - `creator_id` integer, nullable — Id of the member who created this honeytoken.
  - `revoker_id` integer, nullable — Id of the member who revoked this honeytoken.
  - `creator_api_token_id` string, uuid, nullable — ID of the API key which created this honeytoken. Can be null if the honeytoken was not created via the API.
  - `revoker_api_token_id` string, uuid, nullable — ID of the API key which created honeytoken note. Can be null if the honeytoken was not created via the API.
  - `token` object — Secret to be placed as a honeytoken.
  - `tags` string[]
  - `custom_tags` object[] — Custom tags set on the honeytoken.
    - `id` string, uuid
    - `key` string
    - `value` string, nullable

## Other responses

- `400` — Invalid data
- `401` — Invalid API key
- `403` — Forbidden Call
- `503` — API under maintenance

---

[API](https://skmtc.net/gitguardian/apis/gitguardian-api.md) · [All operations](https://skmtc.net/gitguardian/apis/gitguardian-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gitguardian/gitguardian-api/revisions/511b067cdcb1/schema)