# Get all user tokens

Get all non-expired API tokens issued to the current user.

Requires authentication; no additional RBAC permissions required.

## Authentication

Authorization Bearer

Bearer authentication of the form `Bearer <token>`, where token is your auth token.

## Response

### 200 OK

- **kind** `string` Required  
  The kind of record.

- **value** `list of objects` [UserTokenSchema](https://docs.mediakind.com/api-reference/management-api/schemas/usertokenschema) Required  
  Token list.

- **metadata** `object` [UserTokenMetadataSchema](https://docs.mediakind.com/api-reference/management-api/schemas/usertokenmetadataschema) Required  
  Token metadata.

- **JWT** `string` Optional  
  Generated token. We do not store this token, so you will not be able to see it again. Please copy it and keep it securely.

- **id** `string` Required format: uuid  
  ID of token.

- **type** `enum` Required  
  Token type.  
  Allowed values: login, full-access, restricted, ephemeral

- **spec** `object` [UserTokenSpecSchema](https://docs.mediakind.com/api-reference/management-api/schemas/usertokenspecschema) Required  
  Token spec.

- **description** `string` Optional  
    Description of the token. Max 128 characters.
  - **expires** `string` Required format: date-time  
    Date token expires.
  - **issued** `string` Required format: date-time  
    Date token was issued.
  - **lastUsed** `string or null` Required format: date  
    Date token was last used on the MK.IO api.
  - **organizationId** `string or null` Optional format: uuid  
    ID of the organization that this token allows access to.
  - **permissions** `map from strings to any` Optional  
    The RBAC capabilities assigned to the token when type is 'restricted'.
  - **revoked** `string or null` Required format: date-time  
    Date token was revoked, or null if not revoked.
  - **revokedBy** `string` Optional  
    Email of user who revoked this token.
  - **user** `string` Required  
    Email of user the token was issued for.

## Errors

### 400 Bad Request

- **error** `object` [ErrorDetail](https://docs.mediakind.com/api-reference/management-api/schemas/errordetail) Required  
  Pertinent information about the error

- **code** `string` Required  
    The error code.
  - **detail** `string` Required  
    The error message.
  - **extraDetail** `map from strings to any` Optional  
    Extra information regarding this error.
  - **ref** `string` Required  
    A reference to the request that caused the error.
  - **status** `integer` Required  
    The HTTP status code

### 401 Unauthorized

- **error** `object` [ErrorDetail](https://docs.mediakind.com/api-reference/management-api/schemas/errordetail) Required  
  Pertinent information about the error

### 403 Forbidden

- **error** `object` [ErrorDetail](https://docs.mediakind.com/api-reference/management-api/schemas/errordetail) Required  
  Pertinent information about the error

### 404 Not Found

- **error** `object` [ErrorDetail](https://docs.mediakind.com/api-reference/management-api/schemas/errordetail) Required  
  Pertinent information about the error

### 429 Too Many Requests

- **error** `object` [ErrorDetail](https://docs.mediakind.com/api-reference/management-api/schemas/errordetail) Required  
  Pertinent information about the error

### 500 Internal Server Error

- **error** `object` [ErrorDetail](https://docs.mediakind.com/api-reference/management-api/schemas/errordetail) Required  
  Pertinent information about the error