---
title: "List personal access tokens"
method: GET
path: "/api/my-account/personal-access-tokens"
tags: ["My account"]
---

# List personal access tokens

`GET /api/my-account/personal-access-tokens`

## Request

- Base URL: `https://[tenant_id].logto.app`
- URL: `https://[tenant_id].logto.app/api/my-account/personal-access-tokens`
- Auth: OAuth 2 (client credentials, token URL `/oidc/token`, scopes: `all`)

List all personal access tokens of the signed-in user, including expired ones, sorted by creation time in descending order. The token secret values are never returned. The personal-access-tokens scope is required.

## Response `200`

A list of the signed-in user's personal access tokens, without their secret values.

- object[]
  - `name` string, required
  - `createdAt` number, required
  - `expiresAt` number, nullable, required

## Other responses

- `400`: The personal access token field is not enabled in the account center.
- `401`: The access token does not include the personal-access-tokens scope.
- `403`: Forbidden

## Changes

- **2026-10-22** `0598176e010d`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/logto/apis/logto-api-references/changes/api/my-account/personal-access-tokens/get.md)

---

[API](https://skmtc.dev/logto/apis/logto-api-references.md) - [All operations](https://skmtc.dev/logto/apis/logto-api-references/llms.txt) - [OpenAPI document](https://skmtc.dev/logto/apis/logto-api-references/revisions/beed1405186a?raw)