Overview
GET/tokenstokens

List the caller’s token principals (metadata only; secret never returned)

List tokens.

Auth: bearerAuth — calls run as the authenticated user.

Parameters
  • ecosystemIdquery · optionalstring

    Narrow to tokens bound to this ecosystem (rdid or uuid; must be manageable by the caller) — the per-product Tokens view

  • workspacequery · optionalstring

    Scope every op to this WORKSPACE’s owning principal (the caller’s own customer slug, or an organization the caller belongs to). Omitted: the caller’s own tokens. Unknown/foreign slug: 404.

Responses
200

Token principals

  • idstring
  • slugstring
  • descriptionstring
  • prefixstring

    Non-secret leading chars of the secret, for display

  • rdidstring

    reverse-domain id, e.g. token.<owner-slug>.<name>

  • bucketRdidstring

    the token’s own isolated bucket, e.g. storage.<owner-slug>.<name>

  • expiresAtoptionalstring?
  • lastUsedAtoptionalstring?
  • createdAtstring
Example
[
  {
    "id": "string",
    "slug": "string",
    "description": "string",
    "prefix": "string",
    "rdid": "string",
    "bucketRdid": "string",
    "expiresAt": "2020-01-01T00:00:00.000Z",
    "lastUsedAt": "2020-01-01T00:00:00.000Z",
    "createdAt": "2020-01-01T00:00:00.000Z"
  }
]
401

Error

  • erroroptionalobject
Example
{
  "error": {
    "message": "string",
    "code": "string"
  }
}
403

Error

  • erroroptionalobject
Example
{
  "error": {
    "message": "string",
    "code": "string"
  }
}
404

Error

  • erroroptionalobject
Example
{
  "error": {
    "message": "string",
    "code": "string"
  }
}
Code examples
cURL
curl -X GET "https://api.agenticdeveloperhub.com/tokens" \
  -H "Authorization: Bearer YOUR_TOKEN"
JavaScript
const res = await fetch("https://api.agenticdeveloperhub.com/tokens", {
  method: "GET",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN"
  },
});
const data = await res.json();