---
title: "GET /core/tokens/"
method: GET
path: "/core/tokens/"
tags: ["core"]
---

# GET /core/tokens/

`GET /core/tokens/`

Token Viewset

## Query parameters

- `description` string
- `expires` string, date-time
- `expiring` boolean
- `identifier` string
- `intent` 'verification' | 'api' | 'recovery' | 'app_password'
- `managed` string
- `ordering` string
- `page` integer
- `page_size` integer
- `search` string
- `user__username` string

## Response `200`

- PaginatedTokenList
  - `pagination` Pagination, required
    - `next` number, required
    - `previous` number, required
    - `count` number, required
    - `current` number, required
    - `total_pages` number, required
    - `start_index` number, required
    - `end_index` number, required
  - `results` Token[], required
    - `pk` string, uuid, required
    - `managed` string, nullable — Objects that are managed by authentik. These objects are created and updated automatically. This flag only indicates that an object can be overwritten by migrations. You can still modify the objects via the API, but expect changes to be overwritten in a later update.
    - `identifier` string, required
    - `intent` 'verification' | 'api' | 'recovery' | 'app_password'
    - `user` integer
    - `user_obj` User, required — User Serializer
      - `pk` integer, required
      - `username` string, required
      - `name` string, required — User's display name.
      - `is_active` boolean — Designates whether this user should be treated as active. Unselect this instead of deleting accounts.
      - `last_login` string, date-time, nullable
      - `date_joined` string, date-time, required
      - `is_superuser` boolean, required
      - `groups` string[]
      - `groups_obj` PartialGroup[], nullable, required
        - `pk` string, uuid, required
        - `num_pk` integer, required — Get a numerical, int32 ID for the group
        - `name` string, required
        - `is_superuser` boolean — Users added to this group will be superusers.
        - `attributes` object
      - `roles` string[]
      - `roles_obj` Role[], nullable, required
        - `pk` string, uuid, required
        - `name` string, required
      - `email` string, email
      - `avatar` string, required — User's avatar, either a http/https URL or a data URI
      - `attributes` object
      - `uid` string, required
      - `path` string
      - `type` 'internal' | 'external' | 'service_account' | 'internal_service_account'
      - `uuid` string, uuid, required
      - `password_change_date` string, date-time, required
      - `last_updated` string, date-time, required
    - `description` string
    - `expires` string, date-time, nullable
    - `expiring` boolean
  - `autocomplete` Autocomplete, required

## Other responses

- `400`
- `403`

---

[API](https://skmtc.dev/goauthentik/apis/authentik.md) · [All operations](https://skmtc.dev/goauthentik/apis/authentik/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/goauthentik/authentik/revisions/4e42e86021d7/schema)