---
title: "Validate and show token information"
method: GET
path: "/auth/tokens"
tags: ["Authentication"]
---

# Validate and show token information

`GET /auth/tokens`

Validates and shows information for a token, including its expiration date and authorization scope

## Query parameters

- `nocatalog` boolean
- `allow_expired` boolean

## Headers

- `X-Auth-Token` string, required
- `X-Subject-Token` string, required

## Response `200`

Token validation successful

- TokenResponse
  - `token` object, required
    - `methods` string[], required
    - `user` User, required
      - `id` string, required
      - `name` string, required
      - `description` string
      - `enabled` boolean, required
      - `domain_id` string
      - `domain` Domain
        - `id` string, required
        - `name` string, required
        - `description` string
        - `enabled` boolean, required
        - `links` Links
          - `self` string, required
          - `previous` string, nullable
          - `next` string, nullable
        - `options` object
      - `default_project_id` string
      - `email` string
      - `password_expires_at` string, date-time, nullable
      - `options` object
      - `links` Links
        - `self` string, required
        - `previous` string, nullable
        - `next` string, nullable
    - `audit_ids` string[], required
    - `expires_at` string, date-time, required
    - `issued_at` string, date-time, required
    - `project` Project
      - `id` string, required
      - `name` string, required
      - `description` string
      - `enabled` boolean, required
      - `domain_id` string
      - `domain` Domain
        - `id` string, required
        - `name` string, required
        - `description` string
        - `enabled` boolean, required
        - `links` Links
          - `self` string, required
          - `previous` string, nullable
          - `next` string, nullable
        - `options` object
      - `parent_id` string
      - `is_domain` boolean
      - `tags` string[]
      - `options` object
      - `links` Links
        - `self` string, required
        - `previous` string, nullable
        - `next` string, nullable
    - `domain` Domain
      - `id` string, required
      - `name` string, required
      - `description` string
      - `enabled` boolean, required
      - `links` Links
        - `self` string, required
        - `previous` string, nullable
        - `next` string, nullable
      - `options` object
    - `system` object
      - `all` boolean
    - `roles` Role[]
      - `id` string, required
      - `name` string, required
      - `description` string
      - `domain_id` string
      - `options` object
      - `links` Links
        - `self` string, required
        - `previous` string, nullable
        - `next` string, nullable
    - `catalog` CatalogEntry[]
      - `id` string, required
      - `type` string, required
      - `name` string
      - `endpoints` EndpointInCatalog[], required
        - `id` string, required
        - `interface` 'public' | 'internal' | 'admin', required
        - `region` string
        - `region_id` string
        - `url` string, required
    - `is_domain` boolean
    - `application_credential` object
      - `id` string
      - `name` string
      - `restricted` boolean

## Other responses

- `400` — Bad Request
- `401` — Missing or invalid JWT token.
- `403` — Token does not have permission for this operation.
- `404` — Not Found

---

[API](https://skmtc.net/platform9/apis/cluster-blueprint-api.md) · [All operations](https://skmtc.net/platform9/apis/cluster-blueprint-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/platform9/cluster-blueprint-api/revisions/708ad90fe444/schema)