---
title: "GET /api/v1/users/{userId}/clients/{clientId}/tokens"
method: GET
path: "/api/v1/users/{userId}/clients/{clientId}/tokens"
tags: ["User"]
---

# GET /api/v1/users/{userId}/clients/{clientId}/tokens

`GET /api/v1/users/{userId}/clients/{clientId}/tokens`

## Request

- Base URL: `https://your-subdomain.okta.com`
- URL: `https://your-subdomain.okta.com/api/v1/users/{userId}/clients/{clientId}/tokens`
- Auth: API key in header `Authorization`

Lists all refresh tokens issued for the specified User and Client.

## Path parameters

- `userId` string, required
- `clientId` string, required

## Query parameters

- `expand` string
- `after` string
- `limit` integer

## Response `200`

Success

- OAuth2RefreshToken[]
  - `_embedded` object
  - `_links` object
  - `clientId` string
  - `created` string, date-time
  - `createdBy` OAuth2Actor
    - `id` string
    - `type` string
  - `expiresAt` string, date-time
  - `id` string
  - `issuer` string
  - `lastUpdated` string, date-time
  - `scopes` string[]
  - `status` 'ACTIVE' | 'REVOKED'
  - `userId` string

---

[API](https://skmtc.dev/okta/apis/okta-api.md) - [All operations](https://skmtc.dev/okta/apis/okta-api/llms.txt) - [OpenAPI document](https://skmtc.dev/okta/apis/okta-api/revisions/7e5249c30571?raw)