---
title: "Get the current token policy"
method: GET
path: "/api/user/tokens/policy"
tags: ["Token"]
---

# Get the current token policy

`GET /api/user/tokens/policy`

Returns the admin-configured token policy that governs token creation, lifetime, and renewal limits. Read-only for non-admin users.

## Headers

- `X-EDH-USER` string, required
- `X-EDH-TOKEN` string, required

## Response `200`

Token policy retrieved successfully

- object
  - `success` boolean
  - `message` object
    - `max_tokens_per_user` integer — Maximum number of active tokens per user
    - `max_lifetime_hours` integer — Maximum token lifetime in hours
    - `default_lifetime_hours` integer — Default token lifetime when not specified
    - `max_renewals` integer — Maximum number of times a token can be renewed
    - `renewal_allowed` boolean — Whether token renewal is allowed globally
    - `require_expiration` boolean — Whether tokens must have an expiration
    - `global_deny` object — Paths that are denied for all scoped tokens

## Other responses

- `401` — Authentication required

---

[API](https://skmtc.dev/aws-samples/apis/engineering-development-hub-edh-api.md) · [All operations](https://skmtc.dev/aws-samples/apis/engineering-development-hub-edh-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/aws-samples/engineering-development-hub-edh-api/revisions/058396b8f0f1/schema)