---
title: "List user authentication tokens"
method: GET
path: "/v1/users/{user-id}/tokens"
tags: ["Users"]
---

# List user authentication tokens

`GET /v1/users/{user-id}/tokens`

List active authentication tokens issued for the user. The clear-text token
value is included for tokens still held in memory, which covers live ephemeral
tokens (including unspent single-use ones) and persistent tokens issued since
the last server restart. Persistent tokens reloaded from the database no longer
carry it. A user may list their own tokens; listing another user's tokens
requires MANAGE_USERS access right.

## Path parameters

- `user-id` integer, required

## Response `200`

Tokens retrieved successfully

- AuthenticationToken[]
  - `id` integer — Token ID. Assigned only to persistent tokens; ephemeral, service and single-use tokens are always reported with 0 and therefore cannot be revoked by ID.
  - `userId` integer — ID of the user the token was issued for.
  - `persistent` boolean — True if the token is persisted in the database (long-lived API token).
  - `service` boolean — True if this is a service token.
  - `singleUse` boolean — True if the token is single-use. Such a token is destroyed by the login that spends it, so it authenticates exactly one session. It can only be spent on an NXCP login (management console or other NXCP client) and is rejected with 401 if presented as a REST bearer credential.
  - `description` string — Human-readable token description.
  - `issuingTime` integer — Token issuing time (UNIX timestamp, seconds).
  - `expirationTime` integer — Token expiration time (UNIX timestamp, seconds).
  - `value` string — Clear-text token value. Available only while the token is held in memory, which covers the response to the create operation and any listing of still-live tokens (ephemeral, service or unspent single-use). Persistent tokens reloaded from the database after a server restart no longer carry it.

## Other responses

- `400` — Invalid user ID
- `401` — Unauthorized
- `403` — Access denied (not self and no MANAGE_USERS right)

---

[API](https://skmtc.net/netxms/apis/netxms-api.md) · [All operations](https://skmtc.net/netxms/apis/netxms-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/netxms/netxms-api/versions/ee1f54ee3abd/schema)