Hanzo
OpenapiIam

Returns the access tokens issued in your organization, newest first, and can be…

Returns the access tokens issued in your organization, newest first, and can be narrowed to one organization.

GET /v1/iam/tokens

Addresshttps://api.hanzo.ai/v1/iam/tokens
MethodGET
OperationlistTokens
AuthAuthorization: Bearer $HANZO_API_KEY

Returns the access tokens issued in your organization, newest first, and can be narrowed to one organization. Use it to see what is currently authorized before revoking anything.

Request

2 fields.

FieldInTypeRequiredDescription
ownerquerystring
organizationquerystring

Response

StatusBodyMeaning
200iam.listTokensOutok

200 body — 31 fields.

FieldInTypeAlwaysDescription
tokensbodyiam.Token[]
tokens[].accessTokenbodystring
tokens[].accessTokenHashbodystring
tokens[].applicationbodystring
tokens[].codebodystring
tokens[].codeChallengebodystring
tokens[].codeChallengeMethodbodystring
tokens[].codeExpireInbodyinteger
tokens[].codeIsUsedbodyboolean
tokens[].createdAtbodystring (date-time)
tokens[].createdTimebodystring
tokens[].deletedbodyboolean
tokens[].expiresInbodyinteger
tokens[].idbodystring
tokens[].namebodystring
tokens[].noncebodystringNonce is the OIDC authorize nonce, stored on the code and echoed into the id_token minted at the exchange (OIDC Core §3.1.3.6) so a relying party binds the…
tokens[].organizationbodystring
tokens[].ownerbodystring
tokens[].publicGrantbodybooleanPublicGrant records that this grant was established WITHOUT client authentication — a PKCE code exchange from a client that presented no secret.
tokens[].redirectUribodystringRedirectUri binds the authorization code to the exact redirect URI of the authorize request (RFC 6749 §4.1.3): the token endpoint refuses a code redeemed with…
tokens[].refreshConsumedbodyboolean
tokens[].refreshExpireInbodyinteger
tokens[].refreshFamilybodystringRefresh-token rotation state (v2). Each refresh belongs to a family (the grant); rotation mints a new row in the same family and marks the prior one consumed.
tokens[].refreshTokenbodystring
tokens[].refreshTokenHashbodystring
tokens[].resourcebodystringRFC 8707 resource indicator
tokens[].scopebodystring
tokens[].tokenTypebodystring
tokens[].updatedAtbodystring (date-time)
tokens[].userbodystring
tokens[].userCodebodystring

Failure carries the platform error shape — see Errors.

Examples

hanzo has no subcommand for this operation — the CLI serves only what cloud's live route table confirms. Use HTTP or an SDK.


IAM API · All Hanzo APIs · Interactive reference

How is this guide?

On this page