---
title: "Get a service account token"
method: GET
path: "/api/v3/workspaces/{workspace}/service-account-tokens/{tokenId}"
tags: ["Service Account Tokens"]
---

# Get a service account token

`GET /api/v3/workspaces/{workspace}/service-account-tokens/{tokenId}`

## Path parameters

- `workspace` string, required
- `tokenId` string, uuid, required

## Response `200`

Token metadata

- ServiceAccountToken — Metadata for an admin-managed service account token (JWT secret is never returned again after create).
  - `id` string, uuid
  - `name` string
  - `tokenSuffix` string — Last 8 characters of the JWT for identification
  - `createdByName` string, nullable
  - `expiresAt` string, date-time, nullable
  - `isRevoked` boolean
  - `isExpired` boolean
  - `isActive` boolean
  - `lastUsedAt` string, date-time, nullable
  - `createdAt` string, date-time
  - `scopes` ServiceAccountTokenScope[]
    - `id` integer
    - `workspaceId` integer
    - `workspaceName` string
    - `role` string

## Other responses

- `404` — Not found

---

[API](https://skmtc.dev/runwhen/apis/runwhen-platform-api.md) · [All operations](https://skmtc.dev/runwhen/apis/runwhen-platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/runwhen/runwhen-platform-api/revisions/9d1a64d4b1c1/schema)