<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00007Wi1lWCAROkta Classic EngineAdministrationAnswered2024-04-12T22:29:41.000Z2022-03-22T16:46:40.000Z2022-03-29T17:44:27.000Z

WeiQ.83473 (Customer) asked a question.

Is there a API endpoint to list all the API Tokens under my account?

I am currently building a dashboard to monitor all the API tokens under my account. I only need to track the API token id, status, and some timestamps, no need to reveal the token strings.

 

After researching around for a while, I couldn't find such API that can return the list of API tokens.

Then I extracted an internal API from the OKTA Admin UI -> Security -> API -> Token view. And this is the internal API looks like: https://xxxxxx.okta.com/api/internal/tokens

 

Here's some questions about the API:

1. Is there a real public API that can list all the API tokens?

2. If there's no public API to list API tokens, is it allowed to use the /api/internal/tokens endpoint outside okta UI to list all the tokens?

3. What's the rate limit for /api/internal/tokens?

4. Is there any security concern on using this API outside OKTA UI? Why there's no such API created or documented for customer to use?

 

Thank you!


This question is closed.
Loading
Is there a API endpoint to list all the API Tokens under my account?