Skip to navigation
API referenceOrganizationsService tokens

Read service-token configuration

Required scopes: token.get.

Returns configuration metadata only, never a secret or secret hash. Last-use timestamps are available in the list response instead, so authentication does not invalidate editing preconditions.

Response headers:

  • ETag (200): Configuration validator. Excludes volatile last-use metadata, which is available in the token list only. Rotation invalidates this validator.

Authentication

AuthorizationBearer

Organization-owned service token. Issue the initial token in organization credential settings. Scopes are documented per operation via x-required-scopes; they are not OAuth scopes.

Path parameters

organization_idstringRequiredformat: "uuid"
Immutable organization UUID bound to the service token.
credential_idstringRequired

Response headers

X-Request-IdstringOptional
ETagstringOptionalformat: "^"token-[a-f0-9]{64}"$"

Configuration validator. Excludes volatile last-use metadata, which is available in the token list only. Rotation invalidates this validator.

Response

Successful operation
idstring
organization_idstringformat: "uuid"
labelstring
scopeslist of enums
issued_atinteger
expires_atinteger or null

Unix timestamp in seconds; null means no deadline or no recorded use.

Errors

401
Unauthorized Error
403
Forbidden Error
404
Not Found Error
429
Too Many Requests Error
503
Service Unavailable Error