---
title: "List Auth Tokens"
method: GET
path: "/v6/user/tokens"
tags: ["authentication"]
---

# List Auth Tokens

`GET /v6/user/tokens`

## Request

- Base URL: `https://api.vercel.com`
- URL: `https://api.vercel.com/v6/user/tokens`
- Auth: HTTP bearer

Retrieve a list of the current User's authentication tokens.

## Response `200`

- union
  - object
    - `pagination` object, required
      - `count` number, required
      - `next` string, nullable, required
      - `prev` string, nullable, required
    - `tokens` AuthToken[], required
      - `activeAt` number, required: Timestamp (in milliseconds) of when the token was most recently used.
      - `createdAt` number, required: Timestamp (in milliseconds) of when the token was created.
      - `expiresAt` number: Timestamp (in milliseconds) of when the token expires.
      - `id` string, required: The unique identifier of the token.
      - `leakedAt` number: Timestamp (in milliseconds) of when the token was marked as leaked.
      - `leakedUrl` string: URL where the token was discovered as leaked.
      - `name` string, required: The human-readable name of the token.
      - `origin` string: The origin of how the token was created.
      - `prefix` string: The token's prefix, for identification purposes.
      - `revokedAt` number: Timestamp (in milliseconds) of when the token was revoked.
      - `scopes` union[]: The access scopes granted to the token.
        - union
          - object: The access scopes granted to the token.
            - `createdAt` number, required
            - `expiresAt` number
            - `origin` 'app' | 'apple' | 'bitbucket' | 'chatgpt' | 'email' | 'emu' | 'github' | 'github-webhook' | 'gitlab' | 'google' | 'invite' | 'manual' | 'otp' | 'passkey' | 'saml' | 'sms' | 'token-exchange-oidc'
            - `sudo` object
              - …
            - `type` 'user', required
          - object: The access scopes granted to the token.
            - `createdAt` number, required
            - `expiresAt` number
            - `origin` 'app' | 'apple' | 'bitbucket' | 'chatgpt' | 'email' | 'emu' | 'github' | 'github-webhook' | 'gitlab' | 'google' | 'invite' | 'manual' | 'otp' | 'passkey' | 'saml' | 'sms' | 'token-exchange-oidc'
            - `teamId` string, required
            - `type` 'team', required
      - `suffix` string: The last few characters of the token, for identification purposes.
      - `type` string, required: The type of the token.
  - object
    - `pagination` Pagination, required: This object contains information related to the pagination of the current request, including the necessary parameters to get the next or previous page of data.
      - `count` number, required: Amount of items in the current page.
      - `next` number, nullable, required: Timestamp that must be used to request the next page.
      - `prev` number, nullable, required: Timestamp that must be used to request the previous page.
    - `tokens` AuthToken[], required
      - `activeAt` number, required: Timestamp (in milliseconds) of when the token was most recently used.
      - `createdAt` number, required: Timestamp (in milliseconds) of when the token was created.
      - `expiresAt` number: Timestamp (in milliseconds) of when the token expires.
      - `id` string, required: The unique identifier of the token.
      - `leakedAt` number: Timestamp (in milliseconds) of when the token was marked as leaked.
      - `leakedUrl` string: URL where the token was discovered as leaked.
      - `name` string, required: The human-readable name of the token.
      - `origin` string: The origin of how the token was created.
      - `prefix` string: The token's prefix, for identification purposes.
      - `revokedAt` number: Timestamp (in milliseconds) of when the token was revoked.
      - `scopes` union[]: The access scopes granted to the token.
        - union
          - object: The access scopes granted to the token.
            - `createdAt` number, required
            - `expiresAt` number
            - `origin` 'app' | 'apple' | 'bitbucket' | 'chatgpt' | 'email' | 'emu' | 'github' | 'github-webhook' | 'gitlab' | 'google' | 'invite' | 'manual' | 'otp' | 'passkey' | 'saml' | 'sms' | 'token-exchange-oidc'
            - `sudo` object
              - …
            - `type` 'user', required
          - object: The access scopes granted to the token.
            - `createdAt` number, required
            - `expiresAt` number
            - `origin` 'app' | 'apple' | 'bitbucket' | 'chatgpt' | 'email' | 'emu' | 'github' | 'github-webhook' | 'gitlab' | 'google' | 'invite' | 'manual' | 'otp' | 'passkey' | 'saml' | 'sms' | 'token-exchange-oidc'
            - `teamId` string, required
            - `type` 'team', required
      - `suffix` string: The last few characters of the token, for identification purposes.
      - `type` string, required: The type of the token.

## Other responses

- `400`
- `401`: The request is not authorized.
- `403`: You do not have permission to access this resource.
- `410`

## Changes

- **2026-07-21** `2ae10ee9d21c`: 1 info
  - added the non-success response with the status `410`
- **2026-06-11** `14b4658f819e`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/vercel/apis/vercel-api/changes/v6/user/tokens/get.md)

---

[API](https://skmtc.dev/vercel/apis/vercel-api.md) - [All operations](https://skmtc.dev/vercel/apis/vercel-api/llms.txt) - [OpenAPI document](https://skmtc.dev/vercel/apis/vercel-api/revisions/60686c0e1f6a?raw)