---
title: "Get all resource access tokens"
method: POST
path: "/api/connector/v1/resourceAccessTokens/getAll"
tags: ["Resource access tokens"]
---

# Get all resource access tokens

`POST /api/connector/v1/resourceAccessTokens/getAll`

Returns all resource access tokens based on resource access token identifiers, reservations or interval. One of them must be specified in the request. 
Note this operation uses [Pagination](https://mews-systems.gitbook.io/connector-api/guidelines/pagination/) and supports [Portfolio Access Tokens](https://mews-systems.gitbook.io/connector-api/concepts/multi-property).

## Request body

- ResourceAccessTokenFilterParameters
  - `ClientToken` string, required — Token identifying the client application.
  - `AccessToken` string, required — Access token of the client application.
  - `Client` string, required — Name and version of the client application.
  - `Limitation` Limitation, required — Limitation on the quantity of data returned.
    - `Count` integer, required
    - `Cursor` string, uuid, nullable
  - `EnterpriseIds` string[], nullable — Unique identifiers of the Enterprises. If not specified, the operation returns data for all enterprises within scope of the Access Token.
  - `ResourceAccessTokenIds` string[], nullable — Unique identifiers of resource access token. Required if no other filter is provided.
  - `ServiceOrderIds` string[], nullable — Unique identifiers of reservations. Required if no other filter is provided.
  - `CollidingUtc` TimeFilterInterval — When a time interval is used for **filtering** (for example in parameters such as `CreatedUtc.StartUtc` / `CreatedUtc.EndUtc`), the following rules apply: - **Start equals End (equality mode)** If `StartUtc` and `EndUtc` are exactly the same timestamp, the filter is treated as an equality check for that precise moment in time: ``` CreatedUtc == StartUtc ``` This does not represent an interval; only records with `CreatedUtc` equal to that exact instant are returned. - **Start differs from End (interval mode)** If `StartUtc` and `EndUtc` are different, the filter is evaluated as a half-open interval: ``` StartUtc <= CreatedUtc < EndUtc ``` In other words, the start is inclusive and the end is exclusive. Make sure your integration takes inclusive Start / exclusive End behavior of time intervals into account so that no records at the boundaries are omitted.
    - `StartUtc` string, date-time, nullable
    - `EndUtc` string, date-time, nullable
  - `UpdatedUtc` TimeFilterInterval — When a time interval is used for **filtering** (for example in parameters such as `CreatedUtc.StartUtc` / `CreatedUtc.EndUtc`), the following rules apply: - **Start equals End (equality mode)** If `StartUtc` and `EndUtc` are exactly the same timestamp, the filter is treated as an equality check for that precise moment in time: ``` CreatedUtc == StartUtc ``` This does not represent an interval; only records with `CreatedUtc` equal to that exact instant are returned. - **Start differs from End (interval mode)** If `StartUtc` and `EndUtc` are different, the filter is evaluated as a half-open interval: ``` StartUtc <= CreatedUtc < EndUtc ``` In other words, the start is inclusive and the end is exclusive. Make sure your integration takes inclusive Start / exclusive End behavior of time intervals into account so that no records at the boundaries are omitted.
    - `StartUtc` string, date-time, nullable
    - `EndUtc` string, date-time, nullable
  - `ActivityStates` string[], nullable — Whether to return only active, only deleted or both records.

## Response `200`

OK

- ResourceAccessTokenResult
  - `ResourceAccessTokens` ResourceAccessToken[], required — Resource access tokens.
    - `Id` string, uuid, required — Unique identifier of the resource access token.
    - `EnterpriseId` string, uuid, required — Unique identifier of the `Enterprise`.
    - `ServiceOrderId` string, uuid, required — Unique identifier of `Reservation`.
    - `CompanionshipId` string, uuid, nullable — Unique identifier of `Companionship`.
    - `ResourceId` string, uuid, nullable — Unique identifier of `Resource`.
    - `Type` 'PinCode' | 'RfidTag', required — Type of stored value.
    - `Value` string, required — Value of the resource access token.
    - `SerialNumber` string, nullable — Serial number of the resource access token.
    - `ValidityStartUtc` string, date-time, required — Marks the start of interval in which the resource access token can be used.
    - `ValidityEndUtc` string, date-time, required — Marks the end of interval in which the resource access token can be used.
    - `Permissions` ResourceAccessTokenPermissions, required
      - `Bed` boolean — Specify whether the resource access token grants permission to access bed.
      - `Room` boolean — Specify whether the resource access token grants permission to access room.
      - `Floor` boolean — Specify whether the resource access token grants permission to access floor.
      - `Building` boolean — Specify whether the resource access token grants permission to access building.
    - `CreatedUtc` string, date-time, required — Creation date and time of the resource access token in UTC timezone in ISO 8601 format.
    - `UpdatedUtc` string, date-time, required — Last update date and time of the resource access token in UTC timezone in ISO 8601 format.
    - `IsActive` boolean, required — Whether the resource access token is still active.
  - `Cursor` string, uuid, nullable — Unique identifier of the last and hence oldest item returned. This can be used in `Limitation` in a subsequent request to fetch the next batch of older tokens. If `Limitation` is specified in the request message, then `Cursor` will always be included in the response message.

## Other responses

- `204` — Server has successfully fulfilled the request and there is no additional information to send back.
- `400` — Error caused by the client app, e.g. in case of malformed request or invalid identifier of a resource. In most cases, such an error signifies a bug in the client app (consumer of the API).
- `401` — Error caused by usage of invalid ClientToken, AccessToken, or you may not have the necessary permission to use the endpoint.
- `403` — Server error that should be reported to the end user of the client app. Happens for example when the server-side validation fails or when a business-logic check is violated.
- `408` — Error caused by heavy request that takes too long to process (typically tens of seconds). To get around this, request data in smaller batches. For more information, see [Request timeouts](https://mews-systems.gitbook.io/connector-api/guidelines/requests#request-timeouts)
- `429` — Error caused by too many requests sent in a given amount of time. Response contains `Retry-After` header indicating how long the user agent should wait before making a follow-up request. For more information, see [Request limits](https://mews-systems.gitbook.io/connector-api/guidelines/requests#request-limits).
- `500` — Unexpected error on the Mews side. This may be due to a software fault. If such a situation occurs, the error will be logged and the development team notified, however you can raise an issue through GitHub on our [documentation repository](https://github.com/MewsSystems/gitbook-connector-api).

---

[API](https://skmtc.net/mews/apis/connector-api.md) · [All operations](https://skmtc.net/mews/apis/connector-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/mews/connector-api/versions/81933a8ff730/schema)
