Skip to navigation

List personal credential metadata

List the owner’s active personal API/CLI/manual token metadata using a finite personal bt_ credential. Delegated OAuth and organization service tokens cannot inspect personal credentials. Results include retiring tokens during the rotation overlap but omit revoked, expired and completed rotations. Secrets, hashes and issuer principal keys are never returned. An empty scopes array means inherited current user authority. Use limit and after to paginate.

Required scopes: token.get. Scopes intersect current authority; browser cookies never authenticate REST.

Authentication

AuthorizationBearer

Personal bearer credential issued through existing account settings or browser-approved CLI flow. Must be active, finite, unexpired, unrevoked, within any rotation overlap, and bound to an active personal membership/user/account. Explicit scopes intersect current user permissions; empty existing personal scopes inherit current user authority. Not an OAuth grant or service token. Browser cookies are ignored.

Path parameters

account_idstringRequiredformat: "uuid"

Query parameters

limitintegerOptional1-100Defaults to 50
afterstringOptional<=128 characters

Cursor returned by this collection; book collections use the canonical numeric ID. Translation collections use lowercase slugs.

Response

Successful operation
datalist of objects
next_cursorstring or null