<!-- Extension API v0 — pre-1.0. Interfaces may change without notice until P2 seals the custom-code format. First-party extensions track HEAD. -->

# `tokens.list`

List this store's tokens (never the secrets): kind, scopes, expiry, last use.

- **method + path**: `GET /v1/tokens`
- **TR label**: Erişim anahtarları
- **auth**: authenticated · scope gates: any of `admin` — “Erişim anahtarlarını yalnızca mağaza sahibi yönetebilir”
- **agentPolicy**: `owner` — owner sessions only — never callable by any token and never an MCP tool.
- **effects**: none
- **idempotency**: server — the platform derives the key
- **wraps**: — (no command inside)

Machine-readable body schema: [/schemas/routes/tokens.list.json](/schemas/routes/tokens.list.json).

## Body

No request body.