Get a token

curl https://api.subscriby.net/v1/tokens/$TOKEN_ID \  -H "Authorization: Bearer $SUBSCRIBY_TOKEN"

One of the caller's tokens, without its value.

id is an integer serialised as a string, the one identifier in the platform that is not a UUID. See Identifiers.
abilities is the gate strings only. Scope tuples (scope:team:…, scope:project:…) are split out into scopes for readability, so abilities_count counts real permissions rather than bookkeeping.
The plaintext value is never returned here. Lose it and the only recovery is to revoke the token and mint another.

Requires ability

token:view

The token must hold this ability, or the call is refused with 403.

Authorization

bearerToken

AuthorizationBearer <token>

A personal access token minted on the dashboard under Settings, then Tokens, sent as Authorization: Bearer sbt_live_…. The token carries the abilities each endpoint lists under Requires ability and is frozen to one team.

In: header

Path Parameters

token*integer

One of the caller's tokens, resolved by the route binder.

Responses

200OKapplication/json

The token resource.

data*

The response's payload.

401UnauthorizedAUTHENTICATION_REQUIREDapplication/json

The request carries no bearer token, or one that is revoked, malformed, or minted for another environment (an sbt_test_ token on production).

error*

The one envelope every failure uses.

403ForbiddenTOKEN_MISSING_ABILITYapplication/json

The token is valid but does not carry the ability this endpoint requires; error.context.required_ability names the one to grant. An endpoint that also checks who owns a row or which tier the account is on answers FORBIDDEN, TEAM_TIER_REQUIRED or CONNECTOR_TIER_REQUIRED with the same status, and says so in its own description.

error*

The one envelope every failure uses.

404Not foundRESOURCE_NOT_FOUNDapplication/json

An id in the path names nothing the token can see. TENANT_MISMATCH: the project sits outside the token's scope:project: allow-list, or the token carries no team scope. Both answer 404 rather than 403 so that existence outside the token's scope cannot be inferred.

error*

The one envelope every failure uses.

429Too many requestsRATE_LIMITEDapplication/json

The token has spent its 300 requests a minute or 10,000 an hour; Retry-After says when the next one is accepted.

error*

The one envelope every failure uses.

Call it from your code

A sample request in your language, the body each status answers with, and the types to hold them.

curl -X GET "https://example.com/v1/tokens/0"

{  "data": {    "id": "1284",    "name": "Zapier production",    "abilities": [      "project:view-any",      "project-subscription-plan:view"    ],    "scopes": {      "team_id": "a83f0d51-4c92-4b7e-8615-2fd9e70a3c86",      "project_ids": [        "7f3d1c92-8b45-4e6a-9d21-5c8e0a4b6f13"      ]    },    "abilities_count": 2,    "last_used_at": "2026-05-18T09:15:00Z",    "expires_at": null,    "created_at": "2026-05-01T10:05:00Z"  }}

Type definitions

The shapes above as types, ready to paste into your client.

export interface Response {  data: TokenResource;}export interface TokenResource {  id: string;  name: string;  abilities: unknown[];  scopes: Scopes;  abilities_count: number;  last_used_at: string | null;  expires_at: string | null;  created_at: string | null;}export interface Scopes {  team_id: string;  project_ids: string[];}

Get a token

AuthorizationCopy Anchor Link

Path ParametersCopy Anchor Link

ResponsesCopy Anchor Link

Authorization

Path Parameters

Responses