---
title: "List Sub-Account User Tokens"
method: GET
path: "/api/v1/sub-accounts/etoro-trading/user-tokens"
tags: ["Sub-Accounts - eToro Trading"]
---

# List Sub-Account User Tokens

`GET /api/v1/sub-accounts/etoro-trading/user-tokens`

## Request

- Base URL: `https://public-api.etoro.com`
- URL: `https://public-api.etoro.com/api/v1/sub-accounts/etoro-trading/user-tokens`
- Auth: one of:
  - OAuth 2
    - Authorization code
    - Scopes: `etoro-public:sub-accounts:read`
  - OAuth 2
    - Authorization code
    - Scopes: `etoro-public:sub-accounts:write`
- TypeScript: <https://skmtc.dev/etoro/apis/etoro-api/docs/api/v1/sub-accounts/etoro-trading/user-tokens/get.ts> (a function with typed inputs; its response is checked against the schema)

**Rate limit:** 60 requests per 60 seconds. This is the **default shared quota** — it is shared with every other endpoint that has no dedicated limit, so requests across those endpoints all draw from the same budget.

---

Lists all sub-account non-interactive user tokens owned by the authenticated user, across all their eToro trading sub-accounts. The secret token value is never included in list results.

## Headers

- `x-request-id` string, uuid, required
- `x-api-key` string, password, required
- `x-user-key` string, password, required

## Response `200`

User tokens retrieved successfully

- ListUserTokensResponse
  - `userTokens` UserTokenItem[]: The user's sub-account user tokens, across all their eToro trading sub-accounts.
    - `userTokenId` string, uuid: The unique identifier of the user token.
    - `userTokenName` string: The friendly display name assigned to the token.
    - `clientId` string, uuid: The OAuth client identifier associated with the token.
    - `ipsWhitelist` string[]: The IPv4 addresses the token is restricted to, if any.
    - `scopes` ScopeNameItem[]: The scopes granted to the token.
      - `name` string: The permission scope name.
    - `expiresAt` string, date-time, nullable: The UTC expiration of the token, if one was set.
    - `createdAt` string, date-time, nullable: When this user token was created, if known.

## Other responses

- `401`: Unauthorized
- `429`: Too Many Requests — a downstream dependency is throttling requests
- `500`: Internal Server Error

---

[API](https://skmtc.dev/etoro/apis/etoro-api.md) - [All operations](https://skmtc.dev/etoro/apis/etoro-api/llms.txt) - [OpenAPI document](https://skmtc.dev/etoro/apis/etoro-api/revisions/69c1fb266c35?raw)