---
title: "Get User Tokens by Resource Identifier"
method: GET
path: "/programs/{programCode}/accounts/{accountIdentifier}/externalIdentifiers/{resourceId}"
tags: ["TokenManagement"]
---

# Get User Tokens by Resource Identifier

`GET /programs/{programCode}/accounts/{accountIdentifier}/externalIdentifiers/{resourceId}`

Retrieves user tokens associated with the specified resource identifier.

## Path parameters

- `programCode` string, required
- `resourceId` string, required
- `accountIdentifier` string, required

## Headers

- `X-GD-RequestId` string, required

## Response `200`

OK

- GetUserTokenResponse — Represents the response returned after retrieving a user's token information. Contains token resource identifiers, external resource context, and detailed token/user information. Inherits standard response metadata from Gd.Bos.DataTransfer.Response.ResponseBase.
  - `tokenResourceId` string, uuid, nullable — The unique resource identifier for the user's token.
  - `externalResource` string, nullable — An external resource identifier or context related to the token.
  - `identifier` IdentifierData — Represents token and user identification details for a response. Contains token name, user names, contact info, account and payment instrument identifiers, and additional metadata. Used in token-related responses to provide comprehensive identification and context.
    - `tokenname` string, nullable — The token name associated with the user or account.
    - `firstname` string, nullable — The first name of the user.
    - `lastname` string, nullable — The last name of the user.
    - `phone` string, nullable — The phone number of the user.
    - `email` string, nullable — The email address of the user.
    - `nickname` string, nullable — The nickname assigned to the user.
    - `programCode` string, nullable — The program code associated with the user or token.
    - `consumerProfileDirectoryKey` integer, nullable — The unique directory key for the consumer profile.
    - `paymentInstrumentIdentifier` string, uuid, nullable — The unique identifier for the payment instrument.
    - `accountIdentifier` string, uuid, nullable — The unique identifier for the account.
    - `lastTransactionDate` string, date-time, nullable — The date of the last transaction associated with the token or account.
    - `allowupdatetokenname` boolean, nullable — Indicates whether the token name can be updated.
  - `responseDetails` ResponseDetail[], nullable — Required: A list of response details providing status codes, descriptions, and additional information about the result of the operation.
    - `code` integer — The primary status or error code for the response (e.g., 200 for success, 400 for validation error).
    - `subCode` integer, nullable — An optional subcode providing more granular detail about the response or error.
    - `description` string, nullable — A human-readable description of the response, error, or status.
    - `url` string, nullable — A URL linking to documentation or a web page with more information about the response code.

## Other responses

- `401` — Unauthorized
- `403` — Forbidden
- `500` — Internal Server Error
- `503` — Service Unavailable

---

[API](https://skmtc.net/greendot/apis/baas-apis.md) · [All operations](https://skmtc.net/greendot/apis/baas-apis/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/greendot/baas-apis/versions/666553766b78/schema)