> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nekt.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List MCP Tokens

> The tokens your API key's creator has minted.

Only tokens created by **the person who created this API key** are returned — deliberately
stricter than that same person's session, where an Owner or Admin sees every token in the
workspace. A session lasts a day and passed MFA or SSO; an API key lives until someone revokes it
and usually sits in a config file.

`bearer_token` is never included. Use the listing to audit what exists, when each token was last
used (`last_used_at`) and when it expires — then [rotate](/platform-api/mcp-tokens/rotate) or
[edit](/platform-api/mcp-tokens/update) it.

```bash theme={null}
curl --request GET \
  --url "https://api.nekt.ai/api/v1/mcp/tokens/?expand=created_by" \
  --header "x-api-key: YOUR_API_KEY"
```


## OpenAPI

````yaml GET /api/v1/mcp/tokens/
openapi: 3.0.3
info:
  title: Nekt API
  version: v1
  description: Nekt API Documentation
  contact:
    email: support@nekt.ai
servers:
  - url: https://api.nekt.ai
security: []
paths:
  /api/v1/mcp/tokens/:
    get:
      tags:
        - v1
      summary: List MCP tokens
      description: >-
        MCP tokens **created by the person who created this API key**, and only
        those — stricter than the same person's session, which shows every token
        in the workspace when they are an Owner or Admin.
      operationId: v1_mcp_tokens_list
      parameters:
        - name: page
          required: false
          in: query
          description: A page number within the paginated result set.
          schema:
            type: integer
        - name: page_size
          required: false
          in: query
          description: Number of results to return per page.
          schema:
            type: integer
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PaginatedMCPTokenList'
          description: ''
      security:
        - ApiKeyAuth: []
components:
  schemas:
    PaginatedMCPTokenList:
      type: object
      required:
        - count
        - results
      properties:
        count:
          type: integer
          example: 123
        next:
          type: string
          nullable: true
          format: uri
          example: http://api.example.org/accounts/?page=4
        previous:
          type: string
          nullable: true
          format: uri
          example: http://api.example.org/accounts/?page=2
        results:
          type: array
          items:
            $ref: '#/components/schemas/MCPToken'
    MCPToken:
      type: object
      properties:
        id:
          type: string
          format: uuid
          readOnly: true
        description:
          type: string
          maxLength: 80
        bearer_token:
          type: string
          readOnly: true
        expires_at:
          type: string
          format: date-time
          description: >-
            When the token stops working. Optional and create-only — omit it for
            the default 1-year lifetime. Must be in the future and at most 1
            year from now. Requires the mcp_token_custom_expiration feature
            flag.
        last_used_at:
          type: string
          format: date-time
          readOnly: true
          nullable: true
        use_created_by_permissions:
          type: boolean
        tool_scope:
          nullable: true
          description: >-
            Names of the native Nekt MCP tools this token may use. NULL = every
            tool available to the token's creator, future ones included; [] =
            none. Restricted tokens only — a full-access token always exposes
            its creator's whole surface.
        created_at:
          type: string
          format: date-time
          readOnly: true
        updated_at:
          type: string
          format: date-time
          readOnly: true
        live_connection_scopes:
          type: array
          items:
            $ref: '#/components/schemas/MCPTokenLiveConnectionScope'
          writeOnly: true
        secret_scopes:
          type: array
          items:
            type: string
            format: uuid
          writeOnly: true
          nullable: true
          description: >-
            Ids of the secrets this restricted token may reference. Omit to
            inherit the creator's; [] for none.
        semantic_layer_scopes:
          type: object
          additionalProperties:
            type: array
            items:
              type: string
              format: uuid
          writeOnly: true
          nullable: true
          description: >-
            Semantic Layer surface of this restricted token: {"folders": [...],
            "documents": [...]}. A folder covers its whole subtree, resolved at
            read time. Omit to inherit the creator's.
        table_scopes:
          type: object
          additionalProperties:
            type: array
            items:
              type: string
              format: uuid
          writeOnly: true
          nullable: true
          description: >-
            Catalog links for the TABLES axis: {"layers": [...], "folders":
            [...], "tables": [...]}. A layer or folder link means everything
            inside it, now and in the future — tables only.
        volume_scopes:
          type: object
          additionalProperties:
            type: array
            items:
              type: string
              format: uuid
          writeOnly: true
          nullable: true
          description: >-
            Catalog links for the VOLUMES axis: {"layers": [...], "folders":
            [...], "volumes": [...]}. The same layer linked here brings volumes
            only, never tables.
        all_tables:
          type: boolean
        all_volumes:
          type: boolean
        all_secrets:
          type: boolean
        all_semantic_layer:
          type: boolean
        all_live_connections:
          type: boolean
        mcp_config:
          type: string
          readOnly: true
          description: MCP Configuration (Field only visible on expanded view. Expandable)
        created_by:
          type: integer
          readOnly: true
          description: Created by (Expandable)
        tables:
          type: array
          items:
            type: string
          description: Tables (Expandable)
      required:
        - bearer_token
        - created_at
        - created_by
        - description
        - id
        - last_used_at
        - mcp_config
        - updated_at
    MCPTokenLiveConnectionScope:
      type: object
      properties:
        live_connection:
          type: string
          format: uuid
        tools:
          type: array
          items:
            type: string
          nullable: true
      required:
        - live_connection
  securitySchemes:
    ApiKeyAuth:
      type: apiKey
      in: header
      name: x-api-key
      description: 'API Key authentication. Format: ''x-api-key: api_key'''

````