List application tokens

GET

https://iot.telia.lt/api/v2/application_token

GET

/api/v2/application_token

curl -G https://iot.telia.lt/api/v2/application_token \
     -H "Authorization: Bearer <token>" \
     --data-urlencode q=status:1||3

[
  {
    "id": 1234,
    "name": "CI pipeline token",
    "status": {
      "id": 1,
      "description": "ACTIVE"
    },
    "roles": [
      {
        "id": 3,
        "name": "Observer"
      }
    ],
    "created_date": "2026-08-21T10:00:00.000Z",
    "ip_restrictions": [
      {
        "id": 42,
        "ip_address": "10.10.1.0/24"
      }
    ],
    "expiry_date": "2027-08-21T10:00:00.000Z",
    "last_used_date": "2026-08-25T08:30:00.000Z",
    "last_used_ip": "192.168.0.1",
    "created_by": {
      "id": 10,
      "username": "john.doe@example.com",
      "type": {
        "id": 0,
        "description": "HUMAN"
      },
      "name": "John Doe"
    },
    "last_modified_date": "2026-08-24T09:15:00.000Z",
    "last_modified_by": {
      "id": 10,
      "username": "john.doe@example.com",
      "type": {
        "id": 0,
        "description": "HUMAN"
      },
      "name": "John Doe"
    }
  },
  {
    "id": 77,
    "name": "Reporting token",
    "status": {
      "id": 1,
      "description": "ACTIVE"
    },
    "roles": [
      {
        "id": 1,
        "name": "Administrator"
      }
    ],
    "created_date": "2024-02-28T14:24:45.000Z"
  }
]

Returns the application tokens of the requesting organisation.

Only tokens in status ACTIVE are returned unless the q filter asks otherwise. The token itself is never returned; it is available only from the response of the create endpoint.

Authentication

AuthorizationBearer

An auth_token should be provided to authenticate a session.

To obtain an auth_token, see the /api/v1/authenticate POST request.

Query parameters

qstringOptional

Filter the tokens. The only key is status, whose values are the ids that GET /api/v2/application_token/status lists: q=status:1 for the active tokens, q=status:3 for the deleted ones, q=status:1||3 for both. Percent-encode the pipes - q=status:1%7C%7C3 - as an unencoded | is not a legal URI character and is rejected before the request arrives. Defaults to active tokens only.

Response

Success

idinteger

Unique ID of this application token.

namestring

statusobject

roleslist of objects

The role granted to the token.

created_datestringformat: "date-time"

ip_restrictionslist of objectsOptional

IP addresses the token may connect from. Absent where it may connect from any.

expiry_datestringOptionalformat: "date-time"

Absent for a token created without one through the v1 API.

last_used_datestringOptionalformat: "date-time"

Absent until the token has been used.

last_used_ipstringOptional

IP address the token was last used from.

created_byobjectOptional

A user that acted on the token. Absent where an application token acted instead.

last_modified_datestringOptionalformat: "date-time"

Absent until the token has been modified.

last_modified_byobjectOptional

A user that acted on the token. Absent where an application token acted instead.

deleted_datestringOptionalformat: "date-time"

Set only once the token has been deleted.

deleted_byobjectOptional

A user that acted on the token. Absent where an application token acted instead.

Errors

400

Bad Request Error

403

Forbidden Error