---
title: "Get all JWT customizers"
method: GET
path: "/api/configs/jwt-customizer"
tags: ["Configs"]
---

# Get all JWT customizers

`GET /api/configs/jwt-customizer`

Get all JWT customizers for the tenant.

## Response `200`

The JWT customizers.

- union[]
  - union
    - object
      - `key` string, "jwt.accessToken", required
      - `value` object, required
        - `script` string, required
        - `environmentVariables` object
        - `contextSample` object
          - `user` object, required
            - `id` string
            - `username` string, nullable
            - `primaryEmail` string, nullable
            - `primaryPhone` string, nullable
            - `name` string, nullable
            - `avatar` string, nullable
            - `customData` object — arbitrary
            - `identities` object
            - `lastSignInAt` number, nullable
            - `createdAt` number
            - `updatedAt` number
            - `profile` object
              - …
            - `applicationId` string, nullable
            - `isSuspended` boolean
            - `hasPassword` boolean
            - `ssoIdentities` object[]
              - …
            - `mfaVerificationFactors` string[]
            - `roles` object[]
              - …
            - `organizations` object[]
              - …
            - `organizationRoles` object[]
              - …
          - `grant` object
            - `type` string, "urn:ietf:params:oauth:grant-type:token-exchange"
            - `subjectTokenContext` object — arbitrary
          - `interaction` object
            - `interactionEvent` 'SignIn' | 'Register' | 'ForgotPassword'
            - `userId` string
            - `verificationRecords` union[]
              - …
            - `signInContext` object
          - `application` object
            - `tenantId` string
            - `id` string
            - `name` string
            - `description` string, nullable
            - `type` 'Native' | 'SPA' | 'Traditional' | 'MachineToMachine' | 'Protected' | 'SAML'
            - `oidcClientMetadata` object
              - …
            - `customClientMetadata` object
              - …
            - `protectedAppMetadata` object, nullable
              - …
            - `customData` object — arbitrary
            - `isThirdParty` boolean
            - `appLevelAccessControlEnabled` boolean
            - `createdAt` number
          - `organization` object
            - `id` string
            - `name` string
            - `description` string, nullable
            - `customData` object — arbitrary
        - `blockIssuanceOnError` boolean
        - `tokenSample` object
          - `jti` string
          - `aud` union
            - string
            - string[]
          - `scope` string
          - `clientId` string
          - `accountId` string
          - `expiresWithSession` boolean
          - `grantId` string
          - `gty` string
          - `sessionUid` string
          - `sid` string
          - `kind` string, "AccessToken"
    - object
      - `key` string, "jwt.clientCredentials", required
      - `value` object, required
        - `script` string, required
        - `environmentVariables` object
        - `contextSample` object
          - `application` object
            - `tenantId` string
            - `id` string
            - `name` string
            - `description` string, nullable
            - `type` 'Native' | 'SPA' | 'Traditional' | 'MachineToMachine' | 'Protected' | 'SAML'
            - `oidcClientMetadata` object
              - …
            - `customClientMetadata` object
              - …
            - `protectedAppMetadata` object, nullable
              - …
            - `customData` object — arbitrary
            - `isThirdParty` boolean
            - `appLevelAccessControlEnabled` boolean
            - `createdAt` number
        - `blockIssuanceOnError` boolean
        - `tokenSample` object
          - `jti` string
          - `aud` union
            - string
            - string[]
          - `scope` string
          - `clientId` string
          - `kind` string, "ClientCredentials"

## Other responses

- `401` — Unauthorized
- `403` — Forbidden

---

[API](https://skmtc.net/logto/apis/logto-api-references.md) · [All operations](https://skmtc.net/logto/apis/logto-api-references/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/logto/logto-api-references/versions/a163dc77d842/schema)