---
title: "List reader tokens visible to the current account."
method: GET
path: "/api/account/reader-tokens"
tags: ["Library", "Accounts"]
---

# List reader tokens visible to the current account.

`GET /api/account/reader-tokens`

## Request

- Base URL: `https://huggingbay.xyz`
- URL: `https://huggingbay.xyz/api/account/reader-tokens`
- Auth: HTTP bearer

Returns token metadata only. Plaintext bearer tokens are never returned after creation.

**Inputs.** Path, query and header fields are listed below. No request body is required.

**Outputs.** See each status below for its media type, schema and headers. A missing record or unavailable capability is not a successful empty result.

**Errors.** API JSON failures use the documented response schema. Read code, message and next; retry only when the response allows it. Auth, invalid input and missing records need a caller change.

**Rate limits.** Public read budgets apply by client IP and route group. This operation can have a smaller route-specific budget. Read Retry-After on 429 or retryable 503 responses.

**Example setup.** Set HUGGING_BAY_TOKEN to a credential with the role or scope stated by this operation. Reader tokens do not grant publisher or operator rights.

## Query parameters

- `limit` integer

## Response `200`

Reader API key metadata

- ReaderApiKeysResponse
  - `schemaVersion` 'hugging-bay.reader-api-keys.v1', required
  - `generatedAt` string, required
  - `principal` Principal, required (unresolved $ref)
  - `rows` ReaderApiKey[], required (unresolved $ref)
  - `stats` object, required
  - `actions` object, required
  - `policy` string[]

## Other responses

- `403`: Reader, publisher, or admin token required

---

[API](https://skmtc.dev/huggingbay/apis/hugging-bay-public-api.md) · [All operations](https://skmtc.dev/huggingbay/apis/hugging-bay-public-api/llms.txt) · [OpenAPI document](https://skmtc.dev/huggingbay/apis/hugging-bay-public-api/revisions/63c474bf0fe4?raw)