---
title: "List tokens"
method: GET
path: "/api/v1/tokens"
tags: ["tokens"]
---

# List tokens

`GET /api/v1/tokens`

## Request

- Base URL: `https://devs.adaptyvbio.com`
- URL: `https://devs.adaptyvbio.com/api/v1/tokens`
- Auth: HTTP bearer

Returns a flat, paginated list of all tokens (root and attenuated) the
caller owns. Each item carries lineage fields (`parent_token_id`,
`root_token_id`, `kind`) so callers can reconstruct the derivation tree.
Admins with global scope see all tokens across all users.

## Query parameters

- `limit` integer
- `offset` integer

## Response `200`

Token list with lineage

- object: Paginated list response with offset-based navigation metadata. All list endpoints return this shape. Use `offset` and `limit` query parameters to page through results; `total` reports how many items match the query across all pages.
  - `count` integer, required: Number of items in this response.
  - `items` object[], required: The page of results.
    - `attenuation_spec` unknown
    - `created_at` string, date-time, required: ISO 8601 timestamp when the token was created.
    - `expires_at` string, date-time, nullable: ISO 8601 timestamp when the token expires. Null means no expiration.
    - `id` string, required: Token identifier: the root's `token_id` fact for root tokens, or the `attenuated_tokens.id` primary key for attenuated tokens.
    - `kind` string, required: Discriminator: `"root"` for tokens in `api_tokens`, `"attenuated"` for tokens in `attenuated_tokens`.
    - `name` string, required: Human-readable label.
    - `parent_token_id` string, nullable: Immediate parent in the derivation chain. Null for root tokens.
    - `revoked_at` string, date-time, nullable: ISO 8601 timestamp when the token was revoked. Null if still active.
    - `root_token_id` string, nullable: The family root's `token_id`. Null for root tokens themselves.
    - `token_type` string, nullable: Token variant (only for root tokens): `admin`, `user`, `admin_impersonating`, `multi_org`. Null for attenuated tokens.
  - `offset` integer, required: Offset used for this page (mirrors the `offset` query parameter).
  - `total` integer, required: Total number of items matching the query (across all pages).

## Other responses

- `401`: Invalid or missing authentication token
- `403`: Insufficient permissions
- `500`: Internal server error

---

[API](https://skmtc.dev/adaptyvbio/apis/adaptyv-foundry-api.md) - [All operations](https://skmtc.dev/adaptyvbio/apis/adaptyv-foundry-api/llms.txt) - [OpenAPI document](https://skmtc.dev/adaptyvbio/apis/adaptyv-foundry-api/revisions/5a2228f4bd59?raw)