app-tokens list

Command: boundary app-tokens list

The app-tokens list command lists app tokens within an enclosing scope.

Examples

The following example lists app tokens from the default global scope recursively from any child scopes, if applicable:

$ boundary app-tokens list -recursive

Example output:

App Token information:
  ID:                            appt_0987654321
    Scope ID:                    o_1234567890
    Name:                        Example Organization App Token
    Description:                 An example app token in the org scope.
    Status:                      active
    Created By User ID:          u_1234567890
    Created Time:                Tue, 06 Oct 2026 13:12:29 PDT
    Expiration Time:             Thu, 05 Nov 2026 12:12:29 PST
    Approximate Last Access Time: Tue, 06 Oct 2026 13:12:29 PDT
    Authorized Actions:
      delete
      no-op
      read
      read:self
      revoke

  ID:                            appt_1234567890
    Scope ID:                    global
    Name:                        Example App Token
    Description:                 An example app token in the global scope.
    Status:                      active
    Created By User ID:          u_1234567890
    Created Time:                Thu, 01 Oct 2026 18:04:09 PDT
    Expiration Time:             Sat, 31 Oct 2026 18:04:09 PDT
    Approximate Last Access Time: Thu, 01 Oct 2026 18:04:09 PDT
    Authorized Actions:
      delete
      no-op
      read
      read:self
      revoke

Usage

$ boundary app-tokens list [options] [args]

Command options

• -filter (string: "") - If set, Boundary filters the list operation before the results are returned. The filter operates against each item in the list. We recommend that you use single quotes, because the filters contain double quotes. Refer to the Filtering and listing resources documentation for more details.
• -recursive - If set, runs the list operation recursively on any child scopes, if the type supports it. The default value is false.
• -scope-id (string: "") - The scope from which to list the app tokens. The default value is global. You can also specify this value using the BOUNDARY_SCOPE_ID environment variable.
• list_token (optional) - An opaque token that is returned from the previous list response. If you do not supply a value, pagination starts from the beginning.
• page_size (optional) - An unsigned integer that indicates the number of items that should be included on the page of search results. If you do not provide a value, or if you provide a value of 0, Boundary uses the default page size of 1000 items. If you configure it, the page_size value overrides the default page size. Controller administrators can also configure a max_page_size option that constrains the maximum page size a user can request.