---
title: "List workspace Agent tokens (service accounts)"
method: GET
path: "/v1/workspaces/{workspaceId}/agent-tokens"
tags: ["Workspaces"]
---

# List workspace Agent tokens (service accounts)

`GET /v1/workspaces/{workspaceId}/agent-tokens`

Lists the workspace's Agent (service-account) tokens — metadata only, plaintext is never recoverable. Owner/admin only.

## Response `200`

Token list

- object
  - `ok` boolean
  - `count` integer
  - `tokens` object[]
    - `id` string
    - `name` string
    - `scopes` string[]
    - `principal_user_id` string
    - `created_at` string
    - `last_used_at` string, nullable
    - `expires_at` string, nullable
    - `revoked` boolean

## Other responses

- `403` — Caller is not a workspace owner/admin

---

[API](https://skmtc.net/shareout/apis/shareout-rest-api.md) · [All operations](https://skmtc.net/shareout/apis/shareout-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/shareout/shareout-rest-api/versions/804359ead65a/schema)