List registry access tokens

GET

/container-registry/registries/:registry_id/access-tokens

GET

/v1/container-registry/registries/:registry_id/access-tokens

# Example request with curl (set IBEE_API_TOKEN to a platform API token and WORKSPACE_ID to the workspace first).
# REGISTRY_ID: Registry ID
curl "https://api.ibee.ai/v1/container-registry/registries/$REGISTRY_ID/access-tokens?workspace_id=$WORKSPACE_ID" \
  -H "Authorization: Bearer $IBEE_API_TOKEN"

[
  {
    "token_id": "4f2a9c1e-7b3d-4e8a-9f10-2c5d6e7f8a9b",
    "token_name": "<token_name>",
    "harbor_username": "<harbor_username>",
    "permission": "PULL",
    "registry_ids": [
      "4f2a9c1e-7b3d-4e8a-9f10-2c5d6e7f8a9b"
    ],
    "disabled": true,
    "expires_at": "2026-10-25T12:00:00Z",
    "created_by_user_id": "<created_by_user_id>",
    "created_at": "2026-10-25T12:00:00Z",
    "revoked_at": "2026-10-25T12:00:00Z"
  }
]

Lists the access tokens that can use this registry, newest first. Secrets are never returned. Requires scope: container-registry.read.

# Example request with curl (set IBEE_API_TOKEN to a platform API token and WORKSPACE_ID to the workspace first).
# REGISTRY_ID: Registry ID
curl "https://api.ibee.ai/v1/container-registry/registries/$REGISTRY_ID/access-tokens?workspace_id=$WORKSPACE_ID" \
  -H "Authorization: Bearer $IBEE_API_TOKEN"

Authentication

AuthorizationBearer

IBEE platform API token. Production tokens start with ibee_prod_key_; development tokens start with ibee_dev_key_. Use a token only with its matching gateway environment.

Path parameters

registry_idstringRequiredformat: "uuid"

Registry ID.

Query parameters

workspace_idstringRequiredformat: "^[1-9][0-9]*$">=1 character

The positive numeric workspace ID to scope this request to. Zero, negative, and non-numeric values are rejected.

include_revokedbooleanOptionalDefaults to false

Include revoked tokens.

Response

Tokens returned.

token_idstringformat: "uuid"

Unique ID of the token.

token_namestring

Name of the token.

harbor_usernamestring

Docker login username (the username returned at creation).

permissionenum

What a registry access token may do.

PULL: pull images.
PULL_PUSH: pull and push images.

Allowed values:

registry_idslist of strings

Registries the token may use.

disabledboolean

True when the token has been revoked or disabled and no longer authenticates.

expires_atdatetime or null

When the token expires (ISO 8601); null for a token that does not expire.

created_by_user_idstring or null

User who created the token, when it was created by a user.

created_atdatetime

When the token was created (ISO 8601).

revoked_atdatetime or null

When the token was revoked (ISO 8601); null while valid.

Errors

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

422

Unprocessable Entity Error

503

Service Unavailable Error