---
title: "List active API tokens for the authenticated user"
method: GET
path: "/api/user/tokens"
tags: ["Token"]
---

# List active API tokens for the authenticated user

`GET /api/user/tokens`

Returns all non-revoked, non-expired scoped API tokens owned by the caller. Session tokens are excluded.

## Headers

- `X-EDH-USER` string, required
- `X-EDH-TOKEN` string, required

## Response `200`

Token list retrieved successfully

- object
  - `success` boolean
  - `message` object[]
    - `id` integer
    - `name` string
    - `hint` string — Last 8 characters of the token
    - `permissions` object
    - `expires_at` string, date-time, nullable
    - `renewable` boolean
    - `renewal_count` integer
    - `max_renewals` integer, nullable
    - `last_used_at` string, date-time, nullable
    - `last_used_ip` string, nullable
    - `created_at` string, date-time
    - `created_by` string

## Other responses

- `401` — Authentication required

---

[API](https://skmtc.dev/aws-samples/apis/engineering-development-hub-edh-api.md) · [All operations](https://skmtc.dev/aws-samples/apis/engineering-development-hub-edh-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/aws-samples/engineering-development-hub-edh-api/revisions/058396b8f0f1/schema)