---
title: "Read a personal access token"
method: GET
path: "/pat/{id}"
tags: ["Personal access tokens"]
---

# Read a personal access token

`GET /pat/{id}`

## Request

- Base URL: `https://api.nullplatform.com`
- URL: `https://api.nullplatform.com/pat/{id}`
- Auth: HTTP bearer

Reads one of your personal access tokens by ID.

## Path parameters

- `id` integer, required

## Response `200`

The operation was successful.

- PatResponse
  - `id` integer, required: Unique ID for the token.
  - `name` string, required: The descriptive name given to the token.
  - `masked_api_key` string: The token, masked.
  - `access` 'grants' | 'same_as_user', required: Whether the token follows your access (`same_as_user`) or holds its own grants (`grants`).
  - `tags` object[], required: Tags associated with the token. Empty when it has none.
    - `key` string, required: Tag key.
    - `value` string, required: Tag value.
  - `grants` object[], required: What the token can do. For a `same_as_user` token, these are your own grants in the organization at the moment of the request. A token that no longer works, because it expired or your user is inactive, reports none.
    - `id` integer: The ID of the grant.
    - `nrn` string: The NRN of the resource the grant applies to.
    - `role_id` integer: The ID of the role granted.
    - `role_slug` string: The slug of the role granted.
    - `actions` string[]: The action names the grant resolves to, present when it was created from `actions` or `inherits`.
  - `personal` boolean: Always `true` for a personal access token.
  - `owner_id` integer: The ID of the user who created the token.
  - `acting_user_id` integer: The ID of the user the token acts as: you.
  - `last_used_at` string, date-time, nullable: The ISO-8601 UTC timestamp of when the token was last exchanged for an access token.
  - `expires_at` string, date-time, required: The ISO-8601 UTC timestamp of when the token stops working.
  - `expired` boolean: Whether the token has expired.
  - `created_at` string, date-time, required: The ISO-8601 UTC timestamp of when the token was created.
  - `updated_at` string, date-time, required: The ISO-8601 UTC timestamp of when the token was last updated.

## Other responses

- `4XX`: The request couldn't be processed. For example, a parameter is invalid, the resource doesn't exist, or you don't have permission. The body is a problem details object (RFC 9457).
- `5XX`: Something went wrong on nullplatform's side. The body is a problem details object (RFC 9457).

## Changes

- **2026-10-15** `728d4df70ca1`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/nullplatform/apis/nullplatform-api/changes/pat/:id/get.md)

---

[API](https://skmtc.dev/nullplatform/apis/nullplatform-api.md) - [All operations](https://skmtc.dev/nullplatform/apis/nullplatform-api/llms.txt) - [OpenAPI document](https://skmtc.dev/nullplatform/apis/nullplatform-api/revisions/d3f66bc633d4?raw)