List personal access tokens

GET/api/user/tokens

listPersonalAccessTokens

Session-authenticated caller only. Lists PAT metadata for the authenticated user. Raw token values are never returned.

Requires authentication using a session cookie — see tokens and scopes.

curl

curl -X GET 'https://neosource.dev/api/user/tokens' \
  -b 'ns_session=$NEOSOURCE_SESSION'

fetch

fetch("https://neosource.dev/api/user/tokens", {
  method: "GET",
  credentials: "include",
});

neo

neo token list

Responses

application/json

TokenListResponse

object

tokensrequired

array

items

TokenResponse

object

created_atrequired: integerint64
expires_at: integer | nullint64
labelrequired: string
last_used_at: integer | nullint64
resourcesrequired: TokenResourceSummary
scopesrequired: array
Scope grant, as the wire permission strings (`["*"]` for a legacy / unrestricted token).
items
string
token_hint: string | null
Non-secret display hint (`nsp_…abcd`). `None` for pre-attenuation rows.
token_idrequired: string

application/json

one of

Bodies documented once for the whole API — see standard errors.

400Bad Request — one of: invalid_input
401Authentication required
429Rate limited — retry after the `Retry-After` header
500Internal server error
503Service temporarily unavailable / at capacity — retry after the `Retry-After` header
504Gateway timeout — the request exceeded the server's handling budget

Referenced above. Listed here rather than expanded inline, so the same definition is not repeated at every level.

object

Compact resource-lock summary for the token list. `None` on an axis means "unrestricted on this axis".