> ## Documentation Index
> Fetch the complete documentation index at: https://help.pixwel.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List your personal access tokens

> Returns the authenticated user's tokens that have not been revoked, newest first. The token values themselves are never returned.



## OpenAPI

````yaml /openapi.yaml get /personal-access-tokens
openapi: 3.1.0
info:
  title: Pixwel Platform
  description: >-
    The Pixwel Platform REST API. Authenticate with HTTP Basic (email +
    password) or a personal access token (`Authorization: Bearer pat_…`).
    Responses are decorated by proxy middleware (Fields, Links, Permissions,
    etc.). Use `?fields=` to request specific fields.
  version: '2.8'
  contact:
    email: jeff@pixwel.com
  license:
    name: UNLICENSED
    identifier: LicenseRef-Pixwel-Proprietary
servers:
  - url: https://api-staging.pixwel.com/api
    description: Staging
  - url: https://app.pixwel.com/api
    description: Production
security:
  - BasicAuth: []
  - BearerAuth: []
paths:
  /personal-access-tokens:
    get:
      tags:
        - PersonalAccessTokens
      summary: List your personal access tokens
      description: >-
        Returns the authenticated user's tokens that have not been revoked,
        newest first. The token values themselves are never returned.
      operationId: listPersonalAccessTokens
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/PersonalAccessToken'
        '401':
          description: Not authenticated
components:
  schemas:
    PersonalAccessToken:
      type: object
      required:
        - _id
        - name
        - tokenPrefix
        - createdAt
        - lastUsedAt
        - expiresAt
        - revokedAt
      properties:
        _id:
          type: string
        name:
          type: string
          description: User-supplied label, e.g. `ci-deploy`
        tokenPrefix:
          type: string
          description: First 8 hex characters after `pat_`, for telling tokens apart
        createdAt:
          type: integer
          description: Unix timestamp
        lastUsedAt:
          type:
            - integer
            - 'null'
          description: >-
            Unix timestamp of the last request made with this token (throttled
            to one write per minute)
        expiresAt:
          type: integer
          description: Unix timestamp after which the token stops working
        revokedAt:
          type:
            - integer
            - 'null'
          description: Unix timestamp at which the token was revoked
  securitySchemes:
    BasicAuth:
      type: http
      scheme: basic
      description: >-
        Email address and password. A personal access token (`pat_…`) or session
        token (`token-…`) may also be sent in the password field, with any
        non-empty value as the username — a blank username short-circuits to a
        401 before the token is read.
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: pat_<64 hex characters>
      description: >-
        A personal access token: `Authorization: Bearer pat_…`. Create one under
        Preferences → API Tokens, or with `POST /personal-access-tokens`. The
        token acts as its owner, with their full permissions.

````