---
title: "List honeytokens"
method: GET
path: "/v1/risk/honeytokens"
tags: ["Risk Engine"]
---

# List honeytokens

`GET /v1/risk/honeytokens`

## Request

- Base URL: `https://api.1claw.co`
- URL: `https://api.1claw.co/v1/risk/honeytokens`
- Auth: HTTP bearer

Returns all honeytokens (canary secrets) configured for the caller's organization.

## Response `200`

Honeytoken list

- HoneytokenListResponse
  - `honeytokens` Honeytoken[], required
    - `id` string, uuid, required
    - `vault_id` string, uuid, required
    - `org_id` string, uuid, required
    - `secret_path` string, required
    - `created_by` string, uuid, required
    - `created_at` string, date-time, required
    - `notes` string, nullable
    - `triggered_count` integer, required
    - `last_triggered_at` string, date-time, nullable

## Other responses

- `401`: Authentication required or invalid

---

[API](https://skmtc.dev/1claw/apis/1claw-api.md) · [All operations](https://skmtc.dev/1claw/apis/1claw-api/llms.txt) · [OpenAPI document](https://skmtc.dev/1claw/apis/1claw-api/revisions/5fa0918f3b41?raw)