Skip to main content
GET
List a portal's access tokens

Authorizations

hookie_session
string
cookie
required

The console's sealed session cookie, set by WorkOS AuthKit. Mutating requests also require the X-Requested-With CSRF header.

Path Parameters

project_id
string
required
portal_id
string
required

Response

Tokens, newest first. Only the 12-character prefix is returned — tokens are stored SHA-256 hashed and the plaintext is shown once, at issuance. customer names the customer this portal serves (PORT-2g, #321): whoever holds a live token on it (not revoked, not expired) or still has an endpoint that is on. A token for anyone else is a 409. Null when the portal is free.

tokens
object[]
required
customer
object | null

The one customer this portal serves, or null when it has none (PORT-2g). The console locks its token dialog to this id.