OpenapiIam
Returns the access tokens issued in your organization, newest first, and can be…
Returns the access tokens issued in your organization, newest first, and can be narrowed to one organization.
GET /v1/iam/tokens
| Address | https://api.hanzo.ai/v1/iam/tokens |
| Method | GET |
| Operation | listTokens |
| Auth | Authorization: Bearer $HANZO_API_KEY |
Returns the access tokens issued in your organization, newest first, and can be narrowed to one organization. Use it to see what is currently authorized before revoking anything.
Request
2 fields.
| Field | In | Type | Required | Description |
|---|---|---|---|---|
owner | query | string | — | |
organization | query | string | — |
Response
| Status | Body | Meaning |
|---|---|---|
200 | iam.listTokensOut | ok |
200 body — 31 fields.
| Field | In | Type | Always | Description |
|---|---|---|---|---|
tokens | body | iam.Token[] | — | |
tokens[].accessToken | body | string | — | |
tokens[].accessTokenHash | body | string | — | |
tokens[].application | body | string | — | |
tokens[].code | body | string | — | |
tokens[].codeChallenge | body | string | — | |
tokens[].codeChallengeMethod | body | string | — | |
tokens[].codeExpireIn | body | integer | — | |
tokens[].codeIsUsed | body | boolean | — | |
tokens[].createdAt | body | string (date-time) | — | |
tokens[].createdTime | body | string | — | |
tokens[].deleted | body | boolean | — | |
tokens[].expiresIn | body | integer | — | |
tokens[].id | body | string | — | |
tokens[].name | body | string | — | |
tokens[].nonce | body | string | — | Nonce is the OIDC authorize nonce, stored on the code and echoed into the id_token minted at the exchange (OIDC Core §3.1.3.6) so a relying party binds the… |
tokens[].organization | body | string | — | |
tokens[].owner | body | string | — | |
tokens[].publicGrant | body | boolean | — | PublicGrant records that this grant was established WITHOUT client authentication — a PKCE code exchange from a client that presented no secret. |
tokens[].redirectUri | body | string | — | RedirectUri binds the authorization code to the exact redirect URI of the authorize request (RFC 6749 §4.1.3): the token endpoint refuses a code redeemed with… |
tokens[].refreshConsumed | body | boolean | — | |
tokens[].refreshExpireIn | body | integer | — | |
tokens[].refreshFamily | body | string | — | Refresh-token rotation state (v2). Each refresh belongs to a family (the grant); rotation mints a new row in the same family and marks the prior one consumed. |
tokens[].refreshToken | body | string | — | |
tokens[].refreshTokenHash | body | string | — | |
tokens[].resource | body | string | — | RFC 8707 resource indicator |
tokens[].scope | body | string | — | |
tokens[].tokenType | body | string | — | |
tokens[].updatedAt | body | string (date-time) | — | |
tokens[].user | body | string | — | |
tokens[].userCode | body | string | — |
Failure carries the platform error shape — see Errors.
Examples
hanzo has no subcommand for this operation — the CLI serves only what cloud's live route table confirms. Use HTTP or an SDK.
import { Configuration, IamApi } from 'hanzoai';
const api = new IamApi(new Configuration({ accessToken: process.env.HANZO_API_KEY }));
const { data } = await api.listTokens();from hanzoai.cloud import ApiClient, Configuration
from hanzoai.cloud.api import IamApi
client = ApiClient(Configuration(access_token=os.environ["HANZO_API_KEY"]))
result = IamApi(client).list_tokens()cfg := cloud.NewConfiguration()
cfg.AddDefaultHeader("Authorization", "Bearer "+os.Getenv("HANZO_API_KEY"))
client := cloud.NewAPIClient(cfg)
resp, _, err := client.IamAPI.ListTokens(context.Background()).Execute()
if err != nil {
return err
}use hanzo_cloud::apis::{configuration::Configuration, iam_api};
let mut cfg = Configuration::new();
cfg.bearer_access_token = std::env::var("HANZO_API_KEY").ok();
let result = iam_api::list_tokens(&cfg, Default::default()).await?;import ai.hanzo.cloud.ApiClient;
import ai.hanzo.cloud.api.IamApi;
ApiClient client = new ApiClient();
client.setRequestInterceptor(b -> b.header("Authorization", "Bearer " + System.getenv("HANZO_API_KEY")));
var result = new IamApi(client).listTokens();curl https://api.hanzo.ai/v1/iam/tokens \
-H "Authorization: Bearer $HANZO_API_KEY"The door reaches iam through the iam tool, which names its 75 operations with its own verbs — this one among them, under a name only the door declares. describe explains any of them:
curl -X POST https://api.hanzo.ai/v1/mcp \
-H "Content-Type: application/json" \
-d '{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "describe",
"arguments": {
"op": "list__well_known_jwks"
}
}
}'How is this guide?