Get access token API Reference

GET

/tenants/{tenant}/registries/{name}/tokens/{id}

curl --request GET \
  --url https://api.kupe.cloud/api/v1/tenants/acme/registries/registry/tokens/rt-0a1b2c3d4e5f6a7b \
  --header 'Authorization: <Authorization>'

Retrieve an access token or login session: its name, kind, access, creator, expiry, registry username (once issued), when it was last used, and its phase. The secret is never returned.

Authorizations

• BearerAuth

Parameters

Path Parameters

tenant

required

string

Tenant name

name

required

string

Registry name: always registry

id

required

string

Token id: rt- and 16 hex characters

Responses

200

The access token or login session

Media type application/json

object

access

Access is pull, or push (which includes pull).

string

Allowed values: pull push

createdAt

string

createdBy

CreatedBy is the email of the member who created it; it is revoked when they leave the tenant.

string

displayName

string

expiresAt

string

id

ID is rt- and 16 hex characters.

string

kind

Kind is token (an access token) or session (a login session from kupe registry login).

string

Allowed values: token session

lastUsedAt

LastUsedAt is when the token last pulled or pushed, empty if never; read hourly at most.

string

status

object

conditions

Array<object>

object

key

additional properties

message

Message gives detail while Pending or Failed; empty while Ready.

string

phase

Phase is Pending until the token is issued, then Ready; Failed means it can never work: create a new one.

string

Allowed values: Pending Ready Failed

username

Username is the registry username, empty until the token is issued (status.phase Ready).

string

Example

{
  "access": "pull",
  "createdAt": "2026-10-21T10:00:00Z",
  "createdBy": "alice@acme.com",
  "displayName": "GitHub Actions",
  "expiresAt": "2027-01-19T10:00:00Z",
  "id": "rt-0a1b2c3d4e5f6a7b",
  "kind": "token",
  "lastUsedAt": "2026-10-21T11:00:00Z",
  "status": {
    "message": "",
    "phase": "Pending"
  },
  "username": "kupe+acme+tok-0a1b2c3d4e5f6a7b"
}

400

Invalid name or token id

Media type application/json

object

code

string

error

string

field

string

message

string

severity

string

Example ^generated

{
  "code": "example",
  "error": "example",
  "field": "example",
  "message": "example",
  "severity": "example"
}

401

Missing or invalid authentication

Media type application/json

object

code

string

error

string

field

string

message

string

severity

string

Example ^generated

{
  "code": "example",
  "error": "example",
  "field": "example",
  "message": "example",
  "severity": "example"
}

403

Not a member of this tenant

Media type application/json

object

code

string

error

string

field

string

message

string

severity

string

Example ^generated

{
  "code": "example",
  "error": "example",
  "field": "example",
  "message": "example",
  "severity": "example"
}

404

Token not found for this registry

Media type application/json

object

code

string

error

string

field

string

message

string

severity

string

Example ^generated

{
  "code": "example",
  "error": "example",
  "field": "example",
  "message": "example",
  "severity": "example"
}

429

Rate limit exceeded

Media type application/json

object

code

string

error

string

field

string

message

string

severity

string

Example ^generated

{
  "code": "example",
  "error": "example",
  "field": "example",
  "message": "example",
  "severity": "example"
}