---
title: "List the active account's API tokens (never the secrets)"
method: GET
path: "/account/api-tokens"
tags: ["API tokens"]
---

# List the active account's API tokens (never the secrets)

`GET /account/api-tokens`

## Request

- Base URL: `https://api.nippy.host`
- URL: `https://api.nippy.host/account/api-tokens`
- Auth: `bearer` (a scheme the document does not define)

## Response `200`

- APIListApiTokensResponse
  - `tokens` APIApiToken[], required
    - `id` string, required: Token id (use to revoke)
    - `name` string, required: Display name given at creation
    - `displayPrefix` string, required: First characters of the secret after the `nippy_` prefix, for recognising a token without revealing it
    - `scopes` string[], required
    - `expiresAt` string, date-time, nullable, required
    - `revokedAt` string, date-time, nullable, required
    - `lastUsedAt` string, date-time, nullable, required: Approximate (updated at most once per minute per token)
    - `createdByUserId` string, required: User who created the token
    - `createdAt` string, date-time, required

## Other responses

- `401`: Not authenticated

---

[API](https://skmtc.dev/nippy/apis/nippy-backend-api.md) · [All operations](https://skmtc.dev/nippy/apis/nippy-backend-api/llms.txt) · [OpenAPI document](https://skmtc.dev/nippy/apis/nippy-backend-api/revisions/7ab23f040a55?raw)