---
title: "List API tokens for the signed-in provider connection."
method: GET
path: "/api/v1/tokens"
tags: ["Tokens"]
---

# List API tokens for the signed-in provider connection.

`GET /api/v1/tokens`

## Request

- Base URL: `https://commentary.dev`
- URL: `https://commentary.dev/api/v1/tokens`
- Auth: API key in cookie `commentary_session`

## Response `200`

Successful response.

- object
  - `ok` unknown, required
  - `tokens` TokenSummary[], required
    - `id` string
    - `grantId` string
    - `tokenType` string
    - `tokenHint` string
    - `scopes` ExternalScope[]
    - `resourceScope` 'review' | 'repo' | 'account'
    - `owner` string, nullable
    - `repo` string, nullable
    - `prNumber` integer, nullable
    - `branchRef` string, nullable
    - `draftReviewSessionId` string, nullable
    - `clientName` string, nullable
    - `expiresAt` string, date-time, nullable
    - `revokedAt` string, date-time, nullable
    - `lastUsedAt` string, date-time, nullable
    - `createdAt` string, date-time

## Other responses

- `400`: The request was invalid.
- `401`: Authentication is required.
- `403`: The token or session does not have permission for this resource.
- `404`: The resource was not found.
- `429`: The request was rate limited.

---

[API](https://skmtc.dev/commentary/apis/commentary-public-api.md) · [All operations](https://skmtc.dev/commentary/apis/commentary-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/commentary/apis/commentary-public-api/revisions/7aaafc198c52?raw)