---
title: "List access tokens"
method: GET
path: "/api/v2/tokens"
tags: ["Access tokens"]
---

# List access tokens

`GET /api/v2/tokens`

Fetch a list of all access tokens.

## Query parameters

- `showAll` boolean — If set to true, and the authentication access token has the 'Admin' role, personal access tokens for all members will be retrieved.
- `limit` integer — The number of access tokens to return in the response. Defaults to 25.
- `offset` integer — Where to start in the list. This is for use with pagination. For example, an offset of 10 skips the first ten items and then returns the next items in the list, up to the query `limit`.

## Response `200`

Access tokens collection response

- Tokens
  - `items` Token[] — An array of access tokens
    - `_id` string, required
    - `ownerId` string, required
    - `memberId` string, required
    - `_member` MemberSummary
      - `_links` object, required — The location and content type of related resources
      - `_id` string, required — The member's ID
      - `firstName` string — The member's first name
      - `lastName` string — The member's last name
      - `role` string, required — The member's base role. If the member has no additional roles, this role will be in effect.
      - `email` string, required — The member's email address
    - `name` string — A human-friendly name for the access token
    - `description` string — A description for the access token
    - `creationDate` integer, required
    - `lastModified` integer, required
    - `customRoleIds` ObjectId[] — A list of custom role IDs to use as access limits for the access token
    - `inlineRole` Statement[] — An array of policy statements, with three attributes: effect, resources, actions. May be used in place of a role.
      - `resources` string[] — Resource specifier strings
      - `notResources` string[] — Targeted resources are the resources NOT in this list. The <code>resources</code> and <code>notActions</code> fields must be empty to use this field.
      - `actions` ActionSpecifier[] — Actions to perform on a resource
      - `notActions` ActionSpecifier[] — Targeted actions are the actions NOT in this list. The <code>actions</code> and <code>notResources</code> fields must be empty to use this field.
      - `effect` 'allow' | 'deny', required — Whether this statement should allow or deny actions on the resources.
    - `role` string — Base role for the token
    - `token` string — The token value. When creating or resetting, contains the entire token value. Otherwise, contains the last four characters.
    - `serviceToken` boolean — Whether this is a service token or a personal token
    - `_links` object, required — The location and content type of related resources
    - `defaultApiVersion` integer — The default API version for this token
    - `lastUsed` integer
  - `_links` object
  - `totalCount` integer — The number of access tokens returned

## Other responses

- `401` — Invalid access token
- `403` — Forbidden
- `429` — Rate limited

---

[API](https://skmtc.net/launchdarkly/apis/launchdarkly-rest-api.md) · [All operations](https://skmtc.net/launchdarkly/apis/launchdarkly-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/launchdarkly/launchdarkly-rest-api/versions/69c5c9aafe78/schema)