---
title: "List the org's provisioning tokens (provider only)"
method: GET
path: "/v1/orgs/{orgId}/provider/tokens"
tags: ["Provider"]
---

# List the org's provisioning tokens (provider only)

`GET /v1/orgs/{orgId}/provider/tokens`

## Path parameters

- `orgId` string, required

## Response `200`

OK

- ProvisioningTokenItem[]
  - `createdAt` string, required
  - `enrollmentCount` integer, required — Nodes enrolled with this token so far. There is no cap: a token enrolls any number of nodes while it is valid.
  - `expiresAt` string, required — 24 hours after createdAt. Every token expires; the lifetime is fixed.
  - `id` string, required
  - `lastUsedAt` string, nullable
  - `name` string, nullable
  - `nodePool` string
  - `nodeType` string, required
  - `revokedAt` string, nullable
  - `status` string, required — active | expired | revoked. A token that has enrolled nodes is still active until it expires or is revoked.
  - `tokenPrefix` string, required

## Other responses

- `401` — Missing or invalid API key
- `403` — API key lacks the required scope

---

[API](https://skmtc.net/openrelay/apis/openrelay-api.md) · [All operations](https://skmtc.net/openrelay/apis/openrelay-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/openrelay/openrelay-api/revisions/b75b478564cc/schema)
