---
title: "List access tokens of a service account"
method: GET
path: "/service-accounts/{service_account}/access-tokens"
tags: ["access-tokens"]
---

# List access tokens of a service account

`GET /service-accounts/{service_account}/access-tokens`

## Request

- Base URL: `https://example.scalr.io/api/iacp/v3`
- URL: `https://example.scalr.io/api/iacp/v3/service-accounts/{service_account}/access-tokens`
- Auth: HTTP bearer

This endpoint lists service account's access tokens.

## Path parameters

- `service_account` string, required

## Query parameters

- `filter[is-expired]` string
- `page[number]` string
- `page[size]` string
- `sort` string[]
- `include` string[]
- `query` string

## Response `200`

Success.

- AccessTokenListingDocument: JSON:API Document Listing see: https://jsonapi.org/format/#document-structure
  - `data` AccessToken[]
    - `attributes` object
      - `created-at` string, date-time: Date/Time the token was created.
      - `description` string, nullable: The description of the token.
      - `expires-at` string, date-time, nullable: Date/Time when the token is set to expire.
      - `expires-in` integer, nullable: The number of minutes until the token expires.
      - `is-expired` boolean: Whether the token is expired.
      - `last-used-at` string, date-time, nullable: Date/Time when the token was last used.
      - `name` string, nullable: The name of the token.
      - `token` string, nullable: The JWT token which an API client should pass in the `Authorization: Bearer <token>` header. Available only in the [Create an Access Token](#create-an-access-token) response.
    - `id` string
    - `links` object
      - `self` string
    - `relationships` object
      - `created-by` object: The user who created the token.
        - `data` object, nullable, required
          - `id` string, required
          - `type` 'users' | '', required
    - `type` 'access-tokens', required
  - `included` object[]
  - `links` object
  - `meta` object

## Other responses

- `404`: Service account not found, or user unauthorized to perform action.
- `4XX`: Client error.
- `5XX`: Server error.

---

[API](https://skmtc.dev/scalr/apis/scalr-iacp-api.md) - [All operations](https://skmtc.dev/scalr/apis/scalr-iacp-api/llms.txt) - [OpenAPI document](https://skmtc.dev/scalr/apis/scalr-iacp-api/revisions/d3e1dc85657a?raw)