GET/v1/api_tokens
api_tokens.list
Returns a paginated list of API tokens in the caller's tenant. The raw token body is NEVER returned here — only `prefix` (first 24 chars), `name`, `scope`, and last-used metadata. The token bytes are shown exactly once at creation and unrecoverable thereafter (the DB stores only an HMAC-pepper-hashed digest).
Parameters
| Name | Type | Required | Description |
|---|---|---|---|
| cursor | string | optional | Opaque pagination cursor returned in `next_cursor` of the previous response. |
| limit | integer | optional | Page size, 1..100, default 50. |
Response
| Name | Type | Required | Description |
|---|---|---|---|
| object | string | required | Enum: list |
| data | array of ApiToken | required | |
| has_more | boolean | required | |
| next_cursor | stringnull | required | Opaque pagination cursor returned in the previous list response. |
Examples
curl -sS -X GET \
-H "Authorization: Bearer $CULPRIT_API_TOKEN" \
https://api.theculprit.ai/v1/api_tokensTry it
Stored locally in your browser at localStorage.docs.tryit.token. Never sent to Culprit's analytics. Use a read-only token.