Skip to main content
GET
List MCP tokens
Only tokens created by the person who created this API key are returned, deliberately stricter than that same person’s session, where an Owner or Admin sees every token in the workspace. A session lasts a day and passed MFA or SSO; an API key lives until someone revokes it and usually sits in a config file. bearer_token is never included. Use the listing to audit what exists, when each token was last used (last_used_at, taken from the token access log) and when it expires, then rotate or edit it. To see what a token did, not only when, filter the token access log by its id.

Authorizations

x-api-key
string
header
required

API Key authentication. Format: 'x-api-key: api_key'

Query Parameters

page
integer

A page number within the paginated result set.

page_size
integer

Number of results to return per page.

Response

200 - application/json
count
integer
required
Example:

123

results
object[]
required
next
string<uri> | null
Example:

"http://api.example.org/accounts/?page=4"

previous
string<uri> | null
Example:

"http://api.example.org/accounts/?page=2"