---
title: "Return a list of all auth tokens (devices) that the user currently have logged in from."
method: GET
path: "/admin/users/{user_id}/auth-tokens"
tags: ["admin_users"]
---

# Return a list of all auth tokens (devices) that the user currently have logged in from.

`GET /admin/users/{user_id}/auth-tokens`

## Request

- Base URL: `/api` (relative, and the document’s source URL is not known)
- URL: `/api/admin/users/{user_id}/auth-tokens`
- Auth: HTTP basic

If you are running Grafana Enterprise and have Fine-grained access control enabled, you need to have a permission with action `users.authtoken:list` and scope `global.users:*`.

## Path parameters

- `user_id` integer, required

## Response `200`

(empty)

- UserToken[]
  - `AuthToken` string
  - `AuthTokenSeen` boolean
  - `ClientIp` string
  - `CreatedAt` integer
  - `ExternalSessionId` integer
  - `Id` integer
  - `PrevAuthToken` string
  - `RevokedAt` integer
  - `RotatedAt` integer
  - `SeenAt` integer
  - `UnhashedToken` string
  - `UpdatedAt` integer
  - `UserAgent` string
  - `UserId` integer

## Other responses

- `401`: UnauthorizedError is returned when the request is not authenticated.
- `403`: ForbiddenError is returned if the user/token has insufficient permissions to access the requested resource.
- `500`: InternalServerError is a general error indicating something went wrong internally.

---

[API](https://skmtc.dev/grafana/apis/grafana-http-api.md) - [All operations](https://skmtc.dev/grafana/apis/grafana-http-api/llms.txt) - [OpenAPI document](https://skmtc.dev/grafana/apis/grafana-http-api/revisions/df55ba1718ba?raw)