expired=yes|no is derived from expires-datetime rather than being a stored column. Wildcard values (*) are treated as "no filter" rather than a literal match.token value is returned — it is the primary key and hence the key used to revoke.Authorization: Bearer ********************curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/oauth-tokens?client-id=undefined&domain=undefined&reseller=undefined&user-id=undefined&token-type=undefined&expired=undefined&sort=undefined&start=undefined&limit=undefined' \
--header 'Authorization: Bearer <token>'[
{
"token": "8f14e45fceea167a5a36dedd4bea2543",
"client-id": "horizon.example",
"reseller": "ResellerA",
"domain": "example.com",
"user-id": "1001@example.com",
"expires-datetime": "2026-08-12T22:15:00+00:00",
"expired": "no",
"user-scope": "Office Manager",
"token-type": "access",
"mask-chain": ""
},
{
"token": "c9f0f895fb98ab9159f51fd0297e236d",
"client-id": "horizon.example",
"reseller": "ResellerA",
"domain": "example.com",
"user-id": "1001@example.com",
"expires-datetime": "2026-09-11T14:15:00+00:00",
"expired": "no",
"user-scope": "Office Manager",
"token-type": "refresh",
"mask-chain": ""
}
]