Your API tokens

GET

/me/tokens

const url = 'https://example.com/api/v1/me/tokens';
const options = {
  method: 'GET',
  headers: {cookie: '__Host-shardkeep_session=<__Host-shardkeep_session>'}
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://example.com/api/v1/me/tokens \
  --cookie __Host-shardkeep_session=<__Host-shardkeep_session>

Authorizations

sessionCookie
bearerToken

Responses

200

API tokens that are not revoked.

application/json

object

items

required

Array<object>

object

required

string format: uuid

name

required

string

displayPrefix

required

The start of the secret, to tell tokens apart.

string

permissions

The token’s permission subset; absent means all of your permissions.

Array<string>

Allowed values: servers.read servers.create servers.start servers.stop servers.delete servers.console servers.command servers.update files.read files.write files.delete plugins.read plugins.install plugins.update plugins.delete nodes.read nodes.manage backups.read backups.create backups.restore

expiresAt

string format: date-time

lastUsedAt

string format: date-time

createdAt

required

string format: date-time

Example

{
  "items": [
    {
      "permissions": [
        "servers.read"
      ]
    }
  ]
}

401

Not signed in, or the credentials are invalid.

application/problem+json

An RFC 9457 problem with a machine-readable code.

object

type

required

string

title

required

string

status

required

integer

detail

string

code

required

Stable machine-readable error code.

string

Example

{
  "type": "about:blank",
  "title": "Conflict",
  "status": 409,
  "code": "conflict"
}

Shardkeep is free software under the AGPL-3.0. Minecraft is a trademark of Mojang AB; Shardkeep is not affiliated with or endorsed by Mojang or Microsoft.