---
title: "Get Auth Token Metadata"
method: GET
path: "/v5/user/tokens/{tokenId}"
tags: ["authentication"]
---

# Get Auth Token Metadata

`GET /v5/user/tokens/{tokenId}`

## Request

- Base URL: `https://api.vercel.com`
- URL: `https://api.vercel.com/v5/user/tokens/{tokenId}`
- Auth: HTTP bearer

Retrieve metadata about an authentication token belonging to the currently authenticated User.

## Path parameters

- `tokenId` string, required: The identifier of the token to retrieve. The special value "current" may be supplied, which returns the metadata for the token that the current HTTP request is authenticated with.

## Response `200`

Successful response.

- object: Successful response.
  - `token` AuthToken, required: Authentication token metadata.
    - `activeAt` number, required: Timestamp (in milliseconds) of when the token was most recently used.
    - `createdAt` number, required: Timestamp (in milliseconds) of when the token was created.
    - `expiresAt` number: Timestamp (in milliseconds) of when the token expires.
    - `id` string, required: The unique identifier of the token.
    - `leakedAt` number: Timestamp (in milliseconds) of when the token was marked as leaked.
    - `leakedUrl` string: URL where the token was discovered as leaked.
    - `name` string, required: The human-readable name of the token.
    - `origin` string: The origin of how the token was created.
    - `prefix` string: The token's prefix, for identification purposes.
    - `revokedAt` number: Timestamp (in milliseconds) of when the token was revoked.
    - `scopes` union[]: The access scopes granted to the token.
      - union
        - object: The access scopes granted to the token.
          - `createdAt` number, required
          - `expiresAt` number
          - `origin` 'app' | 'apple' | 'bitbucket' | 'chatgpt' | 'email' | 'emu' | 'github' | 'github-webhook' | 'gitlab' | 'google' | 'invite' | 'manual' | 'otp' | 'passkey' | 'saml' | 'sms' | 'token-exchange-oidc'
          - `sudo` object
            - `expiresAt` number, required
            - `origin` 'email-otp' | 'otp' | 'recovery-code' | 'totp' | 'webauthn', required: Possible step-up auth origins
            - `verifiedAt` number
          - `type` 'user', required
        - object: The access scopes granted to the token.
          - `createdAt` number, required
          - `expiresAt` number
          - `origin` 'app' | 'apple' | 'bitbucket' | 'chatgpt' | 'email' | 'emu' | 'github' | 'github-webhook' | 'gitlab' | 'google' | 'invite' | 'manual' | 'otp' | 'passkey' | 'saml' | 'sms' | 'token-exchange-oidc'
          - `teamId` string, required
          - `type` 'team', required
    - `suffix` string: The last few characters of the token, for identification purposes.
    - `type` string, required: The type of the token.

## Other responses

- `400`: One of the provided values in the request query is invalid.
- `401`
- `403`: You do not have permission to access this resource.
- `404`: Token not found with the requested `tokenId`.
- `410`

## Changes

- **2026-10-22** `6c0e780b096e`: 1 info
  - added the non-success response with the status `401`
- **2026-10-08** `b426de1e3932`: 1 info
  - removed the non-success response with the status `401`
- **2026-07-21** `2ae10ee9d21c`: 1 info
  - added the non-success response with the status `410`
- **2026-06-11** `14b4658f819e`: 1 breaking, 3 info
  - added `subschema #1, subschema #2` to the `token/scopes/items/` response property `oneOf` list for the response status `200`
  - added the optional property `token/prefix` to the response with the `200` status
  - added the optional property `token/revokedAt` to the response with the `200` status
  - removed `subschema #1, subschema #2` from the `token/scopes/items/` response property `oneOf` list for the response status `200`
- **2026-02-10** `486a07653d6e`: 1 breaking, 3 info
  - added `subschema #1, subschema #2` to the `token/scopes/items/` response property `oneOf` list for the response status `200`
  - added the optional property `token/leakedUrl` to the response with the `200` status
  - added the optional property `token/suffix` to the response with the `200` status
  - removed `subschema #1, subschema #2` from the `token/scopes/items/` response property `oneOf` list for the response status `200`

[Operation history](https://skmtc.dev/vercel/apis/vercel-api/changes/v5/user/tokens/:tokenId/get.md)

---

[API](https://skmtc.dev/vercel/apis/vercel-api.md) - [All operations](https://skmtc.dev/vercel/apis/vercel-api/llms.txt) - [OpenAPI document](https://skmtc.dev/vercel/apis/vercel-api/revisions/60686c0e1f6a?raw)