---
title: "GET /api/v1/config/service-accounts"
method: GET
path: "/api/v1/config/service-accounts"
tags: ["ServiceAccount"]
---

# GET /api/v1/config/service-accounts

`GET /api/v1/config/service-accounts`

## Query parameters

- `page.max_size` integer
- `page.token` string
- `slugs` string[]
- `names` string[]

## Response `200`

A successful response.

- Configv1ListServiceAccountsResponse
  - `page` Configv1PageResult
    - `next_token` string — An opaque page token that identifies the next page of items that the client should request. An empty value indicates that there are no more items to return.
  - `service_accounts` Configv1ServiceAccount[]
    - `created_at` string, date-time — Timestamp of when the ServiceAccount was created. Cannot be set by clients.
    - `email` string — The unique email user for this service account. Cannot be set by clients.
    - `metrics_restriction` ServiceAccountMetricsRestriction
      - `labels` object — Optional. Specifies labels that further restrict the service account to only read or write metrics with the given label names and values.
      - `permission` 'READ' | 'WRITE' | 'READ_WRITE', required
    - `name` string, required — The name of the ServiceAccount. You can modify this value after the ServiceAccount is created.
    - `slug` string — The unique identifier of the ServiceAccount. If a `slug` isn't provided, one is generated based on the `name` field. You can't modify this field after the ServiceAccount is created.
    - `token` string — Generated API token of the service account. Cannot be set by clients. The token is set only once by the server in the `CreateServiceAccount` response. The `ReadServiceAccount` response always returns an empty token. Therefore, when creating a service account, ensure you securely store the response token. If you lose the token, you must delete and recreate the service account to generate a new token.
    - `unrestricted` boolean — If set, grants the service account access to all Chronosphere APIs, including resource configuration and metric data within the access controls defined by the service account's team membership. Only one of `unrestricted` or `metrics_restriction` must be set.
    - `updated_at` string, date-time — Timestamp of when the ServiceAccount was last updated. Cannot be set by clients.

## Other responses

- `500` — An unexpected error response.
- `default` — An undefined error response.

---

[API](https://skmtc.dev/chronosphere/apis/data-v1-api.md) · [All operations](https://skmtc.dev/chronosphere/apis/data-v1-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/chronosphere/data-v1-api/revisions/ee91fd539ced/schema)