---
title: "List personal access tokens"
method: GET
path: "/api/v1/me/api-tokens"
tags: ["api-tokens"]
---

# List personal access tokens

`GET /api/v1/me/api-tokens`

## Request

- Base URL: `https://api.izap.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.izap.ai/api/v1/me/api-tokens`
- Auth: HTTP bearer

Returns the personal access tokens belonging to the authenticated user. Only metadata is returned; a token's value is never readable after it is created.

## Response `200`

Successful Response

- TokenResponse[]
  - `id` string, uuid, required
  - `name` string, required
  - `token_prefix` string, required: Non-secret leading chars, e.g. 'izap_pat_AbC'.
  - `last_four` string, nullable: Last four chars of the token, for recognition.
  - `scopes` string[], nullable: Permission scopes. Null means full access within the credential's normal permissions.
  - `expires_at` string, date-time, nullable, required
  - `revoked` boolean, required
  - `last_used_at` string, date-time, nullable, required
  - `created` string, date-time, required

## Other responses

- `401`: Missing or invalid credentials.
- `403`: The credential is valid but not authorized for this action.
- `default`: Unexpected error.

---

[API](https://skmtc.dev/izap/apis/izap-api.md) · [All operations](https://skmtc.dev/izap/apis/izap-api/llms.txt) · [OpenAPI document](https://skmtc.dev/izap/apis/izap-api/revisions/e6358c8bf5e9?raw)