---
title: "List the API tokens covering a cluster (grant token-manage)"
method: GET
path: "/api/clusters/{clusterName}/tokens"
tags: ["Auth"]
---

# List the API tokens covering a cluster (grant token-manage)

`GET /api/clusters/{clusterName}/tokens`

## Request

- The document declares no server URL.
- Auth: none declared. Required headers: `Authorization`

## Path parameters

- `clusterName` string, required

## Headers

- `Authorization` string, required

## Response `200`

OK

- ServerAPITokenView[]
  - `clusters` string[]: cluster scope; ["*"] = all
  - `createdAt` string
  - `createdFrom` string
  - `expired` boolean
  - `expiresAt` string
  - `grants` string[]: compact grant prefixes requested by the owner
  - `id` string
  - `label` string
  - `lastUsedAt` string
  - `lastUsedFrom` string
  - `ownerAuthType` string: OwnerAuthType is how the owner was authenticated when the token was issued ("SSO" or "Local"): a token issued by a Cloud18 identity keeps that identity for the self-service rules, which need an SSO caller.
  - `revoked` boolean
  - `revokedAt` string
  - `revokedBy` string
  - `token` string
  - `user` string

## Other responses

- `403`: Forbidden

## Changes

- **2026-10-05** `1bf429f49b60`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/signal18/apis/signal-18-dashboard-api/changes/api/clusters/:clusterName/tokens/get.md)

---

[API](https://skmtc.dev/signal18/apis/signal-18-dashboard-api.md) - [All operations](https://skmtc.dev/signal18/apis/signal-18-dashboard-api/llms.txt) - [OpenAPI document](https://skmtc.dev/signal18/apis/signal-18-dashboard-api/revisions/8ee8a1e31294?raw)