List Organization API Tokens

Returns the API tokens scoped to this organization (both organization-scoped and group-scoped). Unrestricted tokens are not returned here — manage those via GET /v1/auth/api-tokens.

Authorization is symmetric with the revoke endpoint:

• Admins and owners see every token scoped to the organization, with the minting user attached in the owner field.
• Members and viewers see only tokens they minted themselves.

This mirrors the personal-access-token model used in GitHub organization settings: admins get the full attribution list; everyone else sees their own access.

{
  "tokens": [
    {
      "name": "ci-bot",
      "id": "clGFZ4STEe6fljpFzIum8A",
      "organization": "my-org",
      "group": "default",
      "scopes": [
        "db:create",
        "db:configure",
        "db:mint-token"
      ],
      "owner": {
        "username": "alice",
        "email": "alice@example.com"
      },
      "created_at": "2026-05-21"
    }
  ]
}