Skip to content

List current user's API tokens

GET
/personal_access_tokens

Returns all personal access tokens for the authenticated user, ordered by creation date (newest first). Admins can pass user_id to list another user's tokens. Token digests are never exposed. Session auth only — token-authenticated requests receive 403.

Parameters

Query Parameters

user_id

Admin-only. List tokens for this user instead of the current user.

Type
integer
Example42

Responses

Token list

application/json
JSON
{
  
"personal_access_tokens": [
  
  
{
  
  
  
"id": 1,
  
  
  
"name": "CI Pipeline",
  
  
  
"token_prefix": "vulcan_a",
  
  
  
"scopes": [
  
  
  
  
"read",
  
  
  
  
"write"
  
  
  
],
  
  
  
"expires_at": "2026-08-30",
  
  
  
"last_used_at": "2026-05-30 14:22:01 UTC",
  
  
  
"revoked_at": null,
  
  
  
"allowed_ips": null,
  
  
  
"created_at": "2026-05-30 10:00:00 UTC"
  
  
}
  
]
}

Playground

Server
Variables
Key
Value

Samples

Powered by VitePress OpenAPI

Part of the MITRE Security Automation Framework (SAF)