---
title: "AuthenticationTokens:Browse"
method: GET
path: "/v2/authenticationtokens"
tags: ["AuthenticationToken"]
---

# AuthenticationTokens:Browse

`GET /v2/authenticationtokens`

Get all authentication tokens. If you do not supply a merchantCode we return the authentication tokens that are available under your own merchant registration. If you supply a merchantCode you need to have access to that merchant

## Query parameters

- `page` integer
- `merchant` object
  - `eq` string — Get results that equal the given value

## Response `200`

OK

- AuthenticationTokenAuthenticationTokensOutput
  - `authenticationTokens` AuthenticationTokenAuthenticationTokenOutput[] — Collection of Authentication token objects
    - `code` string — The AT-code for an authentication token.
    - `secret` string — A 40 character secret
    - `name` string — The description of the token
    - `merchant` AuthenticationTokenAuthenticationTokenOutputMerchant
      - `code` string — The merchant id of your company starting with M.
      - `name` string — The name of the merchant.
      - `status` 'ACTIVE' | 'INACTIVE' — The status of the merchant.
    - `authorisation` 'all' | 'specified' — Specify which kind of authorisation is applicable for the token all: all merchant rights specified: specify which authorisation groups should be enabled from the token. At least one authorisation group (in the authorisationGroups array) is mandatory
    - `authorisationGroups` object — The authorisation group codes
    - `ipFilter` AuthenticationTokenAuthenticationTokenOutputIpFilter
      - `type` 'DENY_FROM_ALL' | 'null', nullable — The type of the IP filter
      - `exceptionList` object — A list of IP addresses to be filtered on
    - `createdAt` string, date-time, nullable — The date and time at which this entity was created in ISO-8601 (ATOM) notation
    - `createdBy` string, nullable — The reference to an account or token whom created the entity
    - `modifiedAt` string, date-time, nullable — The date and time at which this entity was modified in ISO-8601 (ATOM) notation.
    - `modifiedBy` string, nullable — The reference to an account or token whom modified this entity
    - `deletedAt` string, date-time, nullable — The date and time at which this entity was deleted in ISO-8601 (ATOM) notation.
    - `deletedBy` string, nullable — The reference to an account or token whom deleted the entity
    - `_links` LinkOutput[], nullable
      - `href` string, nullable — The URI to the linked resource
      - `rel` string, nullable — The name of the linked resource
      - `type` string, nullable — The (http(s)) method needed to approach the linked resource
  - `total` integer, nullable — The total items the collection contains
  - `_links` LinkOutput[], nullable
    - `href` string, nullable — The URI to the linked resource
    - `rel` string, nullable — The name of the linked resource
    - `type` string, nullable — The (http(s)) method needed to approach the linked resource

## Other responses

- `400` — Bad request, see response body for more information
- `401` — Unauthorized. Supplied credentials are invalid
- `403` — Forbidden. Supplied credentials have no rights
- `404` — Resource not found
- `405` — Used HTTP method is not allowed
- `406` — Not acceptable. The supplied content type in the accept parameter in the header is not supported
- `410` — Indicates that this resource is no longer available for use
- `415` — Unsupported media. The supplied content type in the content-type parameter in the header is not supported
- `429` — Rate limit reached.
- `500` — An internal error occurred.
- `503` — The server is currently unable to handle your request

---

[API](https://skmtc.dev/pay/apis/pay-transaction-gateway-unit-api.md) · [All operations](https://skmtc.dev/pay/apis/pay-transaction-gateway-unit-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/pay/pay-transaction-gateway-unit-api/revisions/2bc260c7bdfc/schema)