# UserTokenListSchema

**kind**  
string  
*Required*: The kind of record.

**value**  
list of objects [UserTokenSchema](https://docs.mediakind.com/api-reference/management-api/schemas/usertokenschema)  
*Required*: Token list.

**kind**  
string  
*Optional*: The kind of record.

**metadata**  
object [UserTokenMetadataSchema](https://docs.mediakind.com/api-reference/management-api/schemas/usertokenmetadataschema)  
*Required*: Token metadata.

**JWT**  
string  
*Optional*: Generated token. We do not store this token, so you will not be able to see it again. Please copy it and keep it securely.

**id**  
string  
*Required*: format: uuid  
ID of token.

**type**  
enum  
*Required*: Token type.  
Allowed values: login, full-access, restricted, ephemeral

**spec**  
object [UserTokenSpecSchema](https://docs.mediakind.com/api-reference/management-api/schemas/usertokenspecschema)  
*Required*: Token spec.

**description**  
string  
*Optional*: 0-128 characters  
Description of the token. Max 128 characters.

**expires**  
string  
*Required*: format: date-time  
Date token expires.

**issued**  
string  
*Required*: format: date-time  
Date token was issued.

**lastUsed**  
string or null  
*Required*: format: date  
Date token was last used on the MK.IO api.

**organizationId**  
string or null  
*Optional*: format: uuid  
ID of the organization that this token allows access to.

**permissions**  
map from strings to any  
*Optional*: The RBAC capabilities assigned to the token when type is 'restricted'

**revoked**  
string or null  
*Required*: format: date-time  
Date token was revoked, or null if not revoked.

**revokedBy**  
string  
*Optional*: Email of user who revoked this token.

**user**  
string  
*Required*: Email of user the token was issued for.