Skip to content
Plune Plune Plune Docs

API tokens of the people on the verified domains

GET
/v1/companies/{id}/sso/tokens
 
curl --request GET \
  --url 'https://beta-api.plune.ai/v1/companies/example/sso/tokens?limit=50&offset=0' \
  --cookie plune_session=<plune_session>

Owner and managers (#1610). The live tokens of every person whose address is on a VERIFIED domain of the company (the domain matched as the sign-in matches it: lower case, punycode form), whether or not they are members: who, which project, when made and when it ends - never the token or its hash. Newest first; limit (default 50, at most 200) and offset. affectedProjects and unboundTokens cover ALL of the domain’s tokens, not the page, so a confirmation can say which pipelines may break. Anyone else, and a stranger, is told 404. The session only.

Authorizations

Section titled “Authorizations ”

Parameters

Section titled “ Parameters ”

Path Parameters

Section titled “Path Parameters ”
id
required
string

Query Parameters

Section titled “Query Parameters ”
limit
integer
default: 50 >= 1 <= 200
offset
integer
0

Responses

Section titled “ Responses ”

200

Section titled “200 ”

The tokens

Media type application/json
object
affectedProjects
required

The distinct projects the tokens write to.

Array<object>
object
id
required
string
name
required
string
unboundTokens
required

Tokens that belong to no project of their own: they follow their owner’s default project.

integer
tokens
required
Array<object>

A live API token of a person on a verified domain. Never the value and never its hash. The server does not record when a token was last used.

object
id
required
string
prefix
required

The short, non-secret start of the token, as the person’s own token list shows it.

string
person
required
object
userId
required
string
email
required
string
projectId
required
string
nullable
projectName
required
string
nullable
createdAt
required
string format: date-time
expiresAt
required
string format: date-time
nullable
total
required

All live tokens of the domain’s people, not just this page.

integer
limit
required
integer
offset
required
integer
Example generated
{
  "affectedProjects": [
    {
      "id": "example",
      "name": "example"
    }
  ],
  "unboundTokens": 1,
  "tokens": [
    {
      "id": "example",
      "prefix": "example",
      "person": {
        "userId": "example",
        "email": "example"
      },
      "projectId": "example",
      "projectName": "example",
      "createdAt": "2026-04-15T12:00:00Z",
      "expiresAt": "2026-04-15T12:00:00Z"
    }
  ],
  "total": 1,
  "limit": 1,
  "offset": 1
}

401

Section titled “401 ”

No / invalid session

404

Section titled “404 ”

No such company, or the caller is not its owner or a manager

Media type application/json
object
error
required
string
Example generated
{
  "error": "example"
}