# List API Tokens

`GET /tokens`

Lists the caller's active API tokens without revealing their secrets.
## Authentication

Use the following authentication method:

- **Better Auth browser session** (`browserSession`) : Use the Better Auth session cookie from a signed-in browser session. Send it in the `better-auth.session_token` cookie.
## Responses

### 200

Active API tokens without secrets.


### `application/json`

```json
{
  "data": [
    {
      "id": "00000000-0000-0000-0000-000000000000",
      "name": "string",
      "scopes": [
        "pages:read"
      ],
      "expiresAt": "string",
      "lastUsedAt": "string",
      "createdAt": "string"
    }
  ]
}
```