Skip to content
View source specification ↗
GET /{namespace}/{principalType}/{principalId}/tokens/{tokenId}

Returns token metadata and its strong version, without the bearer credential.

Required scope

Any authenticated access token

Path parameters

tokenIdstringRequired

The token identifier (partial ID)

namespacestringRequired

The namespace of the principal

principalTypestringRequired

The type of principal

principalIdstringRequired

The ID of the principal

Returns

200

Stored resource returned; authorized retries replay the same committed response for 24 hours.

Response headers

ETagstring

Strong entity tag matching the response body.

Errors

401 UNAUTHORIZED

Authentication required.

Obtain a valid access token, then retry.

403 FORBIDDEN

Permission denied.

Check the linked account and its permissions for the device or resource.

404 NOT_FOUND

Token not found.

Verify the target identifier and that its endpoint or plugin route still exists.