---
title: "List active tokens"
method: GET
path: "/auth/api-tokens"
tags: ["API Tokens"]
---

# List active tokens

`GET /auth/api-tokens`

Lists all active (non-revoked) API tokens for the authenticated partner. Requires token management to be enabled for the partner.

## Response `200`

List of active tokens

- ApiTokenListItem[]
  - `tokenId` string, required — Unique token identifier
  - `label` string, nullable, required — Human-readable label
  - `scopes` string[], required — Granted scopes
  - `createdAt` string, date-time, required — Token creation timestamp
  - `lastUsedAt` string, date-time, nullable, required — Last time the token was used for authentication

## Other responses

- `401` — Not authenticated
- `403` — Token management not enabled for this partner

## Changes

- **2026-06-12** `da9b369e16fd` — 1 info
  - the endpoint scheme security `ApiKeyAuth` was removed from the API
- **2026-04-02** `a826c41835eb` — 1 info
  - endpoint added
- **2026-04-01** `013070af066e` — 1 breaking
  - api path removed without deprecation
- **2026-04-01** `04cff5f472c6` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/limitless-labs-group/apis/limitless-exchange-api/changes/auth/api-tokens/get.md)

---

[API](https://skmtc.dev/limitless-labs-group/apis/limitless-exchange-api.md) · [All operations](https://skmtc.dev/limitless-labs-group/apis/limitless-exchange-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/limitless-labs-group/limitless-exchange-api/revisions/f60847044e0d/schema)