---
title: "List API tokens"
method: GET
path: "/iam/clients/{clientId}/tokens"
tags: ["API Tokens"]
deprecated: true
---

# List API tokens

`GET /iam/clients/{clientId}/tokens`

> **Deprecated.**

**Deprecated:** This endpoint will be removed on **2026-07-17**.
Use [`GET /v2/clients/{clientId}/tokens`](#operation/iamGetApiTokensV2) instead.

Get information about your permanent API tokens in the account.
A user with the Administrators role gets information about all API tokens in the account.

## Path parameters

- `clientId` integer, required

## Query parameters

- `role` string
- `issued_by` integer
- `not_issued_by` integer
- `deleted` boolean

## Response `200`

OK.

- TokenResponse[]
  - `name` string, required — API token name.
  - `description` string — API token description.
  - `exp_date` string, nullable, required — Date when the API token becomes expired (ISO 8086/RFC 3339 format), UTC. If null, then the API token will never expire.
  - `client_user` object, required — API token role and issuer data.
    - `role` Group, required
      - `id` integer — Group's ID: Possible values are: - 1 - Administrators* 2 - Users* 5 - Engineers* 3009 - Purge and Prefetch only (API+Web)* 3022 - Purge and Prefetch only (API)
      - `name` 'Users' | 'Administrators' | 'Engineers' | 'Purge and Prefetch only (API)' | 'Purge and Prefetch only (API+Web)' — Group's name.
    - `deleted` boolean, required — Deletion flag. If true, then the API token was deleted.
    - `user_id` integer, required — User's ID who issued the API token.
    - `user_name` string, required — User's name who issued the API token.
    - `user_email` string, required — User's email who issued the API token.
    - `client_id` integer, required — Account's ID.
  - `id` integer, required — API token ID.
  - `deleted` boolean, required — Deletion flag. If true, then the API token was deleted.
  - `expired` boolean, required — Expiration flag. If true, then the API token has expired. When an API token expires it will be automatically deleted.
  - `created` string, required — Date when the API token was issued (ISO 8086/RFC 3339 format), UTC.
  - `last_usage` string, required — Date when the API token was last used (ISO 8086/RFC 3339 format), UTC.

## Other responses

- `403` — You do not have permission to perform this action.
- `404` — Account not found.

## Changes

- **2026-04-21** `eb97fe6d936e` — 1 info
  - endpoint deprecated
- **2026-04-21** `a02801156a6a` — 2 info
  - added `#/components/schemas/Token-2` to the `items/` response property `allOf` list for the response status `200`
  - removed `#/components/schemas/schemas-Token` from the `items/` response property `allOf` list for the response status `200`

[Change history](https://skmtc.dev/g-core/apis/gcore-openapi/changes/iam/clients/:clientId/tokens/get.md)

---

[API](https://skmtc.dev/g-core/apis/gcore-openapi.md) · [All operations](https://skmtc.dev/g-core/apis/gcore-openapi/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/g-core/gcore-openapi/revisions/09e652815095/schema)