# Get tokens of all users

Get a list of all tokens that provide access to this MK.IO organization. Expired tokens will not be listed.

RBAC Capability Required: `core.token.get`

## Authentication  
Authorization Bearer  
Bearer authentication of the form `Bearer <token>`, where token is your auth token.

## Response

### 200 OK

- **kind**: `string` (Required)  
  The kind of record.

- **value**: `list of objects` [UserTokenSchema](https://docs.mediakind.com/api-reference/management-api/schemas/usertokenschema) (Required)  
  Token list.

- **metadata**: `object` [UserTokenMetadataSchema](https://docs.mediakind.com/api-reference/management-api/schemas/usertokenmetadataschema) (Required)  
  Token metadata.

- **JWT**: `string` (Optional)  
  Generated token. We do not store this token, so you will not be able to see it again. Please copy it and keep it securely.

- **id**: `string` (Required, format: uuid)  
  ID of token.

- **type**: `enum` (Required)  
  Token type. Allowed values: login, full-access, restricted, ephemeral

- **spec**: `object` [UserTokenSpecSchema](https://docs.mediakind.com/api-reference/management-api/schemas/usertokenspecschema) (Required)  
  Token spec.

- **description**: `string` (Optional, 0-128 characters)  
    Description of the token. Max 128 characters.  
  
  - **expires**: `string` (Required, format: date-time)  
    Date token expires.  
  
  - **issued**: `string` (Required, format: date-time)  
    Date token was issued.  
  
  - **lastUsed**: `string or null` (Required, format: date)  
    Date token was last used on the MK.IO api.  
  
  - **organizationId**: `string or null` (Optional, format: uuid)  
    ID of the organization that this token allows access to.  
  
  - **permissions**: `map from strings to any` (Optional)  
    The RBAC capabilities assigned to the token when type is 'restricted'  
  
  - **revoked**: `string or null` (Required, format: date-time)  
    Date token was revoked, or null if not revoked.  
  
  - **revokedBy**: `string` (Optional)  
    Email of user who revoked this token.  
  
  - **user**: `string` (Required)  
    Email of user the token was issued for.

## Errors

### 400 Bad Request  
- **error**: `object` [ErrorDetail](https://docs.mediakind.com/api-reference/management-api/schemas/errordetail) (Required)  
  Pertinent information about the error  
  - **code**: `string` (Required)  
    The error code.  
  - **detail**: `string` (Required)  
    The error message.  
  - **extraDetail**: `map from strings to any` (Optional)  
    Extra information regarding this error.  
  
- **ref**: `string` (Required)  
   A reference to the request that caused the error.  
- **status**: `integer` (Required)  
    The HTTP status code

### 401 Unauthorized  
- **error**: `object` [ErrorDetail](https://docs.mediakind.com/api-reference/management-api/schemas/errordetail) (Required)  
  Pertinent information about the error  
  - **code**: `string` (Required)  
    The error code.  
  - **detail**: `string` (Required)  
    The error message.  
  - **extraDetail**: `map from strings to any` (Optional)  
    Extra information regarding this error.  
  
- **ref**: `string` (Required)  
   A reference to the request that caused the error.  
- **status**: `integer` (Required)  
    The HTTP status code

### 403 Forbidden  
- **error**: `object` [ErrorDetail](https://docs.mediakind.com/api-reference/management-api/schemas/errordetail) (Required)  
  Pertinent information about the error  
  - **code**: `string` (Required)  
    The error code.  
  - **detail**: `string` (Required)  
    The error message.  
  - **extraDetail**: `map from strings to any` (Optional)  
    Extra information regarding this error.  
  
- **ref**: `string` (Required)  
   A reference to the request that caused the error.  
- **status**: `integer` (Required)  
    The HTTP status code

### 404 Not Found  
- **error**: `object` [ErrorDetail](https://docs.mediakind.com/api-reference/management-api/schemas/errordetail) (Required)  
  Pertinent information about the error  
  - **code**: `string` (Required)  
    The error code.  
  - **detail**: `string` (Required)  
    The error message.  
  - **extraDetail**: `map from strings to any` (Optional)  
    Extra information regarding this error.  
  
- **ref**: `string` (Required)  
   A reference to the request that caused the error.  
- **status**: `integer` (Required)  
    The HTTP status code

### 429 Too Many Requests  
- **error**: `object` [ErrorDetail](https://docs.mediakind.com/api-reference/management-api/schemas/errordetail) (Required)  
  Pertinent information about the error  
  - **code**: `string` (Required)  
    The error code.  
  - **detail**: `string` (Required)  
    The error message.  
  - **extraDetail**: `map from strings to any` (Optional)  
    Extra information regarding this error.  
  
- **ref**: `string` (Required)  
   A reference to the request that caused the error.  
- **status**: `integer` (Required)  
    The HTTP status code

### 500 Internal Server Error  
- **error**: `object` [ErrorDetail](https://docs.mediakind.com/api-reference/management-api/schemas/errordetail) (Required)  
  Pertinent information about the error  
  - **code**: `string` (Required)  
    The error code.  
  - **detail**: `string` (Required)  
    The error message.  
  - **extraDetail**: `map from strings to any` (Optional)  
    Extra information regarding this error.  
  
- **ref**: `string` (Required)  
   A reference to the request that caused the error.  
- **status**: `integer` (Required)  
    The HTTP status code