# List refresh tokens (/docs/apis/management/users/GetAllRefreshTokens)

`GET /users/{user_id}/grants/refresh_tokens`

Retrieves a paginated list of refresh tokens issued for the specified user. Optional query parameters allow searching, filtering, and sorting the results. Access to grant and token management endpoints requires an active Secure+ subscription.

Base URL: `https://{tenant}.{region}.monocloud.com/api`, where `{tenant}`, `{region}` (one of us, eu, in) come from your tenant. Authentication: send your Management API key in the `X-API-KEY` header.

## Parameters

- `user_id` (path) (string, required) The unique identifier of the user.
- `page` (query) (integer, int32, default 1) The page number to retrieve.
- `size` (query) (integer, int32, default 10) The number of grants to return per page.
- `client_id` (query) (string) Filters results to grants issued to the specified client.
- `session_id` (query) (string) Filters results to grants issued within the specified session.
- `sort` (query) (string) Sort expression in the format `field:direction`, where direction is `1` for ascending or `-1` for descending. Supported fields include - `creation_time`.

## Response body

`200`, JSON. The user's refresh tokens were retrieved successfully

Returns `RefreshToken[]`. Each item has these fields:

- `id` (string, required) The unique identifier of the grant.
- `client_id` (string, required) The unique identifier of the client to which the grant was issued.
- `creation_time` (integer, required, date-time) Specifies the time at which the grant was issued (in Epoch).
- `session_id` (string) The unique identifier of the user session associated with this token.
- `is_session_bound` (boolean, required) Specifies whether the token is bound to the session.
- `scopes` (string[], required) The scopes granted to this token.
- `expiration` (integer, date-time) Specifies the time at which the token expires (in Epoch).
- `audiences` (string[], required) The intended audiences for which access tokens may be issued using this refresh token.
- `issuer` (string) The issuer that generated this token.

## Errors

- `400` Bad Request
  - `type` (string, required) A URI reference that identifies the error type. When accessed, it may provide human-readable documentation.
  - `title` (string, required) A short, human-readable summary of the error.
  - `status` (integer, required, int32) The HTTP status code associated with this error response.
  - `trace_id` (string, required) A unique identifier for the request, used for tracing and diagnostics.
  - `detail` (string) A human-readable explanation specific to this occurrence of the error.
  - `instance` (string) A URI reference that identifies the specific occurrence of the error.
- `401` Unauthorized
- `402` Payment Required
  Same body as `400`.
- `403` Forbidden
- `404` Not Found
  Same body as `400`.
- `422` Unprocessable Entity
  - `type` (string, required) A URI reference that identifies the error type. When accessed, it may provide human-readable documentation.
  - `title` (string, required) A short, human-readable summary of the error.
  - `status` (integer, required, int32) The HTTP status code associated with this error response.
  - `trace_id` (string, required) A unique identifier for the request, used for tracing and diagnostics.
  - `detail` (string) A human-readable explanation specific to this occurrence of the error.
  - `instance` (string) A URI reference that identifies the specific occurrence of the error.
  - `errors` (Record<string, string[]>, required) A key-value map of validation errors, where each key represents a request field and the value contains one or more messages describing why the request could not be processed.

## Example (MonoCloud .NET SDK)

```csharp
using MonoCloud.Management;
using MonoCloud.Management.Core.Base;

var apiClient = new MonoCloudManagementClient(new MonoCloudConfig("<your-domain>", "[[API-Key]]"));


var userId = "WUgDGqaqzqkRmsgd3PFAT";

var page = 1;

var size = 10;

var clientId = "eCOGRJYpnNwwAAuCeReEW";

var sessionId = "F8B7C57ACB5BEE57AC582D96CAF46D4D";

var sort = "creation_time:1";


var result = await apiClient.Users.GetAllRefreshTokensAsync(userId, page, size, clientId, sessionId, sort);
```

## Example (MonoCloud Javascript SDK)

```javascript
import { MonoCloudManagementClient } from '@monocloud/management';

const apiClient = MonoCloudManagementClient.init({ domain: '<your-domain>', apiKey: '[[API-Key]]' });

const userId = 'WUgDGqaqzqkRmsgd3PFAT';

const page = 1;

const size = 10;

const clientId = 'eCOGRJYpnNwwAAuCeReEW';

const sessionId = 'F8B7C57ACB5BEE57AC582D96CAF46D4D';

const sort = 'creation_time:1';

const result = apiClient.users.getAllRefreshTokens(userId, page, size, clientId, sessionId, sort);
```