---
title: "List Auth Tokens"
method: GET
path: "/v6/user/tokens"
tags: ["authentication"]
---

# List Auth Tokens

`GET /v6/user/tokens`

Retrieve a list of the current User's authentication tokens.

## Response `200`

- union
  - object
    - `tokens` AuthToken[], required
      - `id` string, required — The unique identifier of the token.
      - `name` string, required — The human-readable name of the token.
      - `type` string, required — The type of the token.
      - `prefix` string — The token's prefix, for identification purposes.
      - `suffix` string — The last few characters of the token, for identification purposes.
      - `origin` string — The origin of how the token was created.
      - `scopes` union[] — The access scopes granted to the token.
        - union
          - object — The access scopes granted to the token.
            - `type` 'user', required
            - `sudo` object
              - …
            - `origin` 'app' | 'apple' | 'bitbucket' | 'chatgpt' | 'email' | 'emu' | 'github' | 'github-webhook' | 'gitlab' | 'google' | 'invite' | 'manual' | 'otp' | 'passkey' | 'saml' | 'sms' | 'token-exchange-oidc'
            - `createdAt` number, required
            - `expiresAt` number
          - object — The access scopes granted to the token.
            - `type` 'team', required
            - `teamId` string, required
            - `origin` 'app' | 'apple' | 'bitbucket' | 'chatgpt' | 'email' | 'emu' | 'github' | 'github-webhook' | 'gitlab' | 'google' | 'invite' | 'manual' | 'otp' | 'passkey' | 'saml' | 'sms' | 'token-exchange-oidc'
            - `createdAt` number, required
            - `expiresAt` number
      - `createdAt` number, required — Timestamp (in milliseconds) of when the token was created.
      - `activeAt` number, required — Timestamp (in milliseconds) of when the token was most recently used.
      - `expiresAt` number — Timestamp (in milliseconds) of when the token expires.
      - `revokedAt` number — Timestamp (in milliseconds) of when the token was revoked.
      - `leakedAt` number — Timestamp (in milliseconds) of when the token was marked as leaked.
      - `leakedUrl` string — URL where the token was discovered as leaked.
    - `pagination` object, required
      - `count` number, required
      - `next` string, nullable, required
      - `prev` string, nullable, required
  - object
    - `tokens` AuthToken[], required
      - `id` string, required — The unique identifier of the token.
      - `name` string, required — The human-readable name of the token.
      - `type` string, required — The type of the token.
      - `prefix` string — The token's prefix, for identification purposes.
      - `suffix` string — The last few characters of the token, for identification purposes.
      - `origin` string — The origin of how the token was created.
      - `scopes` union[] — The access scopes granted to the token.
        - union
          - object — The access scopes granted to the token.
            - `type` 'user', required
            - `sudo` object
              - …
            - `origin` 'app' | 'apple' | 'bitbucket' | 'chatgpt' | 'email' | 'emu' | 'github' | 'github-webhook' | 'gitlab' | 'google' | 'invite' | 'manual' | 'otp' | 'passkey' | 'saml' | 'sms' | 'token-exchange-oidc'
            - `createdAt` number, required
            - `expiresAt` number
          - object — The access scopes granted to the token.
            - `type` 'team', required
            - `teamId` string, required
            - `origin` 'app' | 'apple' | 'bitbucket' | 'chatgpt' | 'email' | 'emu' | 'github' | 'github-webhook' | 'gitlab' | 'google' | 'invite' | 'manual' | 'otp' | 'passkey' | 'saml' | 'sms' | 'token-exchange-oidc'
            - `createdAt` number, required
            - `expiresAt` number
      - `createdAt` number, required — Timestamp (in milliseconds) of when the token was created.
      - `activeAt` number, required — Timestamp (in milliseconds) of when the token was most recently used.
      - `expiresAt` number — Timestamp (in milliseconds) of when the token expires.
      - `revokedAt` number — Timestamp (in milliseconds) of when the token was revoked.
      - `leakedAt` number — Timestamp (in milliseconds) of when the token was marked as leaked.
      - `leakedUrl` string — URL where the token was discovered as leaked.
    - `pagination` Pagination, required — This object contains information related to the pagination of the current request, including the necessary parameters to get the next or previous page of data.
      - `count` number, required — Amount of items in the current page.
      - `next` number, nullable, required — Timestamp that must be used to request the next page.
      - `prev` number, nullable, required — Timestamp that must be used to request the previous page.

## Other responses

- `400`
- `401` — The request is not authorized.
- `403` — You do not have permission to access this resource.
- `410`

---

[API](https://skmtc.net/vercel/apis/api.md) · [All operations](https://skmtc.net/vercel/apis/api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/vercel/api/versions/61d1ba3f6dac/schema)