---
title: List Tokens
---
[Skip to content](#_top)
[API Reference](https://developers.cloudflare.com/api)
[Accounts](https://developers.cloudflare.com/api/resources/accounts)
[Tokens](https://developers.cloudflare.com/api/resources/accounts/subresources/tokens)
Copy Markdown
Open in **Claude**Open in **ChatGPT**Open in **Cursor**
---
**Copy Markdown****View as Markdown**
# List Tokens
GET/accounts/{account\_id}/tokens
List Account Owned API tokens created for this account. Callers with `com.cloudflare.api.account.token.list_self` permission only receive tokens they created. Results include active, disabled, and recently-expired tokens when `include_expired` is set to true.
##### Security
API Token
The preferred authorization scheme for interacting with the Cloudflare API. [Create a token](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/).
**Example:**`Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY`
##### Accepted Permissions (at least one required)
`Account API Tokens Write``Account API Tokens Read`
##### P ath ParametersExpand Collapse
account\_id: string
Account identifier tag.
maxLength32
minLength32
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20account_id%20%3E%20(schema)>)
##### Q uery ParametersExpand Collapse
direction: optional "asc"or "desc"
Direction to order results.
One of the following:
"asc"
Link to this property
"desc"
Link to this property
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20direction%20%3E%20(schema)>)
include\_expired: optional boolean
When true, includes recently-expired tokens in the response.
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20include_expired%20%3E%20(schema)>)
page: optional number
Page number of paginated results.
minimum1
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20page%20%3E%20(schema)>)
per\_page: optional number
Maximum number of results per page.
maximum50
minimum5
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20per_page%20%3E%20(schema)>)
##### ReturnsExpand Collapse
errors: array of object {code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20errors>)
messages: array of object {code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20messages>)
success: true
Whether the API call was successful.
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20success>)
result: optional array of Token { id, condition, creator\_email\_at\_creation, 10 more }
id: optional string
Token identifier tag.
maxLength32
Link to this property
condition: optional object {request\_ip }
request\_ip: optional object {in, not\_in }
Client IP restrictions.
in: optional array of TokenConditionCIDRList
List of IPv4/IPv6 CIDR addresses.
Link to this property
not\_in: optional array of TokenConditionCIDRList
List of IPv4/IPv6 CIDR addresses.
Link to this property
Link to this property
Link to this property
creator\_email\_at\_creation: optional string
The email address of the user who created the token at the time of creation. Only present for Account Owned API Tokens when a creator email was available.
maxLength90
Link to this property
expires\_on: optional string
The expiration time on or after which the JWT MUST NOT be accepted for processing.
formatdate-time
Link to this property
issued\_on: optional string
The time on which the token was created.
formatdate-time
Link to this property
last\_used\_on: optional string
Last time the token was used.
formatdate-time
Link to this property
modified\_on: optional string
Last time the token was modified.
formatdate-time
Link to this property
name: optional string
Token name.
maxLength120
Link to this property
not\_before: optional string
The time before which the token MUST NOT be accepted for processing.
formatdate-time
Link to this property
policies: optional array of TokenPolicy { id, effect, permission\_groups, resources }
List of access policies assigned to the token.
id: string
Policy identifier.
Link to this property
effect: "allow"or "deny"
Allow or deny operations against the resources.
One of the following:
"allow"
Link to this property
"deny"
Link to this property
Link to this property
permission\_groups: array of object {id, meta, name }
A set of permission groups that are specified to the policy.
id: string
Identifier of the permission group.
Link to this property
meta: optional object {category, deprecated, description, 5 more }
Attributes associated to the permission group.
category: optional string
A category used to group permission groups.
Link to this property
deprecated: optional string
Indicates whether the permission group is deprecated.
Link to this property
description: optional string
Additional information about the permission group.
Link to this property
editable: optional string
Indicates whether the permission group can be edited.
Link to this property
eol\_at: optional string
The planned end-of-life date and time, when provided.
formatdate-time
Link to this property
label: optional string
A label identifying the permission group.
Link to this property
scopes: optional string
The scope associated with the permission group.
Link to this property
visibility: optional string
Indicates the permission group’s availability or visibility.
Link to this property
Link to this property
name: optional string
Name of the permission group.
Link to this property
Link to this property
resources: map\[string]or map\[map\[string]]
A list of resource names that the policy applies to.
One of the following:
IAMResourcesTypeObjectString = map\[string]
Map of simple string resource permissions
Link to this property
IAMResourcesTypeObjectNested = map\[map\[string]]
Map of nested resource permissions
Link to this property
Link to this property
Link to this property
provisioner\_id: optional string
The identifier of the service that provisioned the token. For an OAuth-provisioned token, this is the OAuth client identifier. Present when provisioner_type is present and null when the identifier is unavailable.
Link to this property
provisioner\_type: optional string
The type of service that provisioned the token. Only present for provisioned Account Owned API Tokens.
Link to this property
status: optional "active"or "disabled"or "expired"
Status of the token.
One of the following:
"active"
Link to this property
"disabled"
Link to this property
"expired"
Link to this property
Link to this property
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20result>)
result\_info: optional object {count, page, per\_page, total\_count }
count: optional number
Total number of results for the requested service
Link to this property
page: optional number
Current page within paginated list of results
Link to this property
per\_page: optional number
Number of results per page of results
Link to this property
total\_count: optional number
Total results available without any search parameters
Link to this property
[Link to this property](<#(resource)%20accounts.tokens%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20result_info>)
### List Tokens
HTTP
HTTPTypeScriptPythonGoTerraform
```
curl https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/tokens \
-H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"
```
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": [
{
"id": "ed17574386854bf78a67040be0a770b0",
"condition": {
"request_ip": {
"in": [
"123.123.123.0/24",
"2606:4700::/32"
],
"not_in": [
"123.123.123.100/24",
"2606:4700:4700::/48"
]
}
},
"creator_email_at_creation": "user@example.com",
"expires_on": "2020-01-01T00:00:00Z",
"issued_on": "2018-07-01T05:20:00Z",
"last_used_on": "2020-01-02T12:34:00Z",
"modified_on": "2018-07-02T05:20:00Z",
"name": "readonly token",
"not_before": "2018-07-01T05:20:00Z",
"policies": [
{
"id": "f267e341f3dd4697bd3b9f71dd96247f",
"effect": "allow",
"permission_groups": [
{
"id": "c8fed203ed3043cba015a93ad1616f1f",
"meta": {
"category": "category",
"deprecated": "deprecated",
"description": "description",
"editable": "editable",
"eol_at": "2019-12-27T18:11:19.117Z",
"label": "load_balancer_admin",
"scopes": "com.cloudflare.api.account",
"visibility": "visibility"
},
"name": "Zone Read"
},
{
"id": "82e64a83756745bbbb1c9c2701bf816b",
"meta": {
"category": "category",
"deprecated": "deprecated",
"description": "description",
"editable": "editable",
"eol_at": "2019-12-27T18:11:19.117Z",
"label": "fbm_user",
"scopes": "com.cloudflare.api.account",
"visibility": "visibility"
},
"name": "Magic Network Monitoring"
}
],
"resources": {
"com.cloudflare.api.account.zone.22b1de5f1c0e4b3ea97bb1e963b06a43": "*"
}
}
],
"provisioner_id": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4",
"provisioner_type": "com.cloudflare.api.oauthtoken",
"status": "active"
}
],
"result_info": {
"count": 1,
"page": 1,
"per_page": 20,
"total_count": 2000
}
}
```
##### Returns Examples
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": [
{
"id": "ed17574386854bf78a67040be0a770b0",
"condition": {
"request_ip": {
"in": [
"123.123.123.0/24",
"2606:4700::/32"
],
"not_in": [
"123.123.123.100/24",
"2606:4700:4700::/48"
]
}
},
"creator_email_at_creation": "user@example.com",
"expires_on": "2020-01-01T00:00:00Z",
"issued_on": "2018-07-01T05:20:00Z",
"last_used_on": "2020-01-02T12:34:00Z",
"modified_on": "2018-07-02T05:20:00Z",
"name": "readonly token",
"not_before": "2018-07-01T05:20:00Z",
"policies": [
{
"id": "f267e341f3dd4697bd3b9f71dd96247f",
"effect": "allow",
"permission_groups": [
{
"id": "c8fed203ed3043cba015a93ad1616f1f",
"meta": {
"category": "category",
"deprecated": "deprecated",
"description": "description",
"editable": "editable",
"eol_at": "2019-12-27T18:11:19.117Z",
"label": "load_balancer_admin",
"scopes": "com.cloudflare.api.account",
"visibility": "visibility"
},
"name": "Zone Read"
},
{
"id": "82e64a83756745bbbb1c9c2701bf816b",
"meta": {
"category": "category",
"deprecated": "deprecated",
"description": "description",
"editable": "editable",
"eol_at": "2019-12-27T18:11:19.117Z",
"label": "fbm_user",
"scopes": "com.cloudflare.api.account",
"visibility": "visibility"
},
"name": "Magic Network Monitoring"
}
],
"resources": {
"com.cloudflare.api.account.zone.22b1de5f1c0e4b3ea97bb1e963b06a43": "*"
}
}
],
"provisioner_id": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4",
"provisioner_type": "com.cloudflare.api.oauthtoken",
"status": "active"
}
],
"result_info": {
"count": 1,
"page": 1,
"per_page": 20,
"total_count": 2000
}
}
```