API reference · Identity and tokens
List live API tokens, newest first, with their expiry state
GET
/v1/orgs/{org}/api-tokens- Permission
iam.api_tokens.read- Operation
iam.api_tokens.list
Parameters
| Name | In | Type | Required | Notes |
|---|---|---|---|---|
org | path | string | yes | for example "org_01h455vb4pex5vsknk084sn02q" |
limit | query | integer | no | 1 to 100; default 50 |
cursor | query | string | no | 0 to 200 characters |
x-obhut-management-assignment | header | string | no | Select one staff assignment. Direct membership remains the default. Bound API tokens use their stored source and ignore this selector. For example "masg_01h455vb4pex5vsknk084sn02q" |
Response 200
| Field | Type | Required | Notes |
|---|---|---|---|
items | array of object | yes | |
items[].id | string | yes | for example "token_01h455vb4pex5vsknk084sn02q" |
items[].name | string | yes | 1 to 100 characters |
items[].permissions | array of string | yes | |
items[].createdAt | string (date-time) | yes | UTC, ISO 8601. |
items[].expiresAt | string (date-time) or null | yes | |
items[].lastUsedAt | string (date-time) or null | yes | |
items[].management | object or null | yes | |
items[].management.assignmentId | string | yes | for example "masg_01h455vb4pex5vsknk084sn02q" |
items[].management.linkId | string | yes | for example "mlink_01h455vb4pex5vsknk084sn02q" |
items[].management.providerOrgId | string | yes | for example "org_01h455vb4pex5vsknk084sn02q" |
items[].sourceEnded | boolean | yes | |
items[].expired | boolean | yes | |
nextCursor | string or null | yes |