List issued tokens

GET

/oauth-tokens

Last modified:2026-10-30 21:27:04

OperationId:listOauthTokens

Lists the opaque access and refresh tokens the grant flows issued, one row per token, with each token masked. Requires Super User or Super User Read Only scope.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Query Params

Responses

🟢200OK

application/json

The tokens. Filters combine. An empty array when none match.

Bodyapplication/json

🟠401Unauthorized

🟠403Forbidden

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/oauth-tokens?client-id=app.example.com&domain=example.com&reseller=example-reseller&user-id=1001%40example.com&token-type=access&expired=no&sort=expires%20desc&start=undefined&limit=100&include-secret=yes' \
--header 'Authorization: Bearer <token>'

Response Example

200 - Masked tokens

An access token and the refresh token issued with it.

[
    {
        "token": "65****************************ca",
        "token-hash": "9199798cae673ef7a50099971461fe45ff1934a3a1f68cbe49ea59fe69ea9e75",
        "client-id": "app.example.com",
        "reseller": "example-reseller",
        "domain": "example.com",
        "user-id": "1001@example.com",
        "expires-datetime": "2026-11-06T14:30:00+00:00",
        "expired": "no",
        "user-scope": "Office Manager",
        "token-type": "refresh",
        "mask-chain": ""
    },
    {
        "token": "3c****************************79",
        "token-hash": "1b34d5bff5b863962dca217fc9107f9d7877c65c353b88445fdd7a5a5d6fc73e",
        "client-id": "app.example.com",
        "reseller": "example-reseller",
        "domain": "example.com",
        "user-id": "1001@example.com",
        "expires-datetime": "2026-10-07T15:30:00+00:00",
        "expired": "no",
        "user-scope": "Office Manager",
        "token-type": "access",
        "mask-chain": ""
    }
]

Modified at 2026-10-30 21:27:04

Delete OAuth client

Count issued tokens