Skip to main content
GET
List MCP tokens
Only tokens created by the person who created this API key are returned — deliberately stricter than that same person’s session, where an Owner or Admin sees every token in the workspace. A session lasts a day and passed MFA or SSO; an API key lives until someone revokes it and usually sits in a config file. bearer_token is never included. Use the listing to audit what exists, when each token was last used (last_used_at) and when it expires — then rotate or edit it.

Authorizations

x-api-key
string
header
required

API Key authentication. Format: 'x-api-key: api_key'

Query Parameters

page
integer

A page number within the paginated result set.

page_size
integer

Number of results to return per page.

Response

200 - application/json
count
integer
required
Example:

123

results
object[]
required
next
string<uri> | null
Example:

"http://api.example.org/accounts/?page=4"

previous
string<uri> | null
Example:

"http://api.example.org/accounts/?page=2"