List API tokens | Deel | Documentation

curl -G https://api.letsdeel.com/rest/api-tokens \
     -H "X-Beta: true" \
     -H "Authorization: Bearer <token>" \
     -d cursor=eyJvZmZzZXQiOjUwfQ \
     -d limit=50 \
     -d owner_profile_id=1234567 \
     -d search=payroll \
     -d signal=STALE \
     -d sort=NEWEST \
     -d token_type=ORGANIZATION

{
  "data": [
    {
      "id": "7f0c1b9e-3c3a-4a63-9a43-2d6c1a0e8b51",
      "label": "Payroll sync",
      "scopes": [
        "contracts:read",
        "people:read"
      ],
      "status": "ACTIVE",
      "is_stale": false,
      "group_ids": [],
      "created_at": "2026-09-01T10:00:00.000Z",
      "created_by": {
        "name": "Jane Doe",
        "email": "jane.doe@example.com",
        "status": "ACTIVE",
        "profile_id": "1234567"
      },
      "expires_at": "2027-01-01T00:00:00.000Z",
      "token_type": "ORGANIZATION",
      "integration": "zapier",
      "last_used_at": "2026-10-20T08:15:00.000Z",
      "invalidated_at": "2026-10-21T09:30:00.000Z",
      "invalidated_by": {
        "name": "Jane Doe",
        "email": "jane.doe@example.com",
        "status": "ACTIVE",
        "profile_id": "1234567"
      },
      "invalidation_reason": "Rotated after the vendor migration",
      "should_hide_pii_data": false,
      "should_hide_employment_data": false
    }
  ],
  "has_more": true,
  "next_cursor": "eyJvZmZzZXQiOjUwfQ",
  "total_count": 120
}

Lists your organization’s tokens and your own personal tokens, newest first, without their secret values. Use the filters to find tokens that need attention, such as stale, expiring or orphaned ones.

Token scopes: tokens:read

Beta: this version requires the X-Beta: true request header and its contract may change before it is promoted to stable. It is scheduled to become stable on 2027-02-03.

Authentication

AuthorizationBearer

Authentication

The Deel API uses bearer tokens to authenticate requests. All API calls must be made over HTTPS — calls over plain HTTP or without authentication will fail.

curl -X GET 'https://api.deel.training/rest/v2/contracts' \
  -H 'Authorization: Bearer YOUR-TOKEN-HERE'

Learn more about authentication

AuthorizationBearer

Standard OAuth2 security scheme based on https://swagger.io/docs/specification/authentication/

Query parameters

limitintegerOptional4-100

Maximum number of tokens to return in one page, newest first. Defaults to 100.

cursorstringOptional

Cursor from the previous page. A cursor carries the filters of the first page, so other filters sent with it are ignored.

token_typeenumOptional

Only return tokens of this type.

Allowed values:

signalenumOptional

Only return tokens that need attention for this reason: FULL_ACCESS holds every available scope, STALE is unused for a while, EXPIRING expires soon, ORPHANED belongs to someone who left, PERSONAL is a usable personal token, ACTIVE is any usable token, INVALIDATED was invalidated or has expired.

searchstringOptional<=100 characters

Case-insensitive match on the token label, one of its scopes, or its owner’s name or email.

owner_profile_idstringOptional

Only return tokens owned by this profile.

sortenumOptional

Sort order. Defaults to newest first.

Allowed values:

Response

A page of API tokens.

datalist of objects

The API tokens.

has_moreboolean

True when there is another page after this one.

next_cursorstring or null

Cursor for the next page; null when there are no more results.

total_countinteger or null

Tokens matching the filters across all pages; null on pages fetched with a cursor.

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

429

Too Many Requests Error

500

Internal Server Error

Authentication

Authentication

Headers

Query parameters

Response

Errors