Skip to content
Home/
/Auth Tokens

Auth Tokens

Read and write the third-party credentials stored in your workspace, so you can find the id of the credential a data connector should authenticate with, and store a new one without leaving your integration. Reading requires an OAuth token with the read_auth_tokens scope; creating and updating require the write_auth_tokens scope and an access token associated with a teammate. You can create a text credential to send yourself, or an oauth credential whose access token Intercom obtains and refreshes automatically via the client-credentials grant. Only credentials with a token_type of text can be updated. No endpoint ever returns a credential value, client secret, refresh configuration, or OAuth configuration.

Schemas
Operations

List all auth tokens

Request

Returns a paginated list of the workspace's stored third-party credentials. Use this to discover the id of a credential you want a data connector to authenticate with — that id is not otherwise available over REST. Only metadata is returned; credential values are never exposed. The list is not exhaustive: credentials a teammate created are listed, as are those created by some Intercom integrations, but credentials installed by an app package, those created by most other integrations, and those minted for an individual teammate's MCP access are not.

Security
bearerAuth
Query
per_pageinteger, [ 1 .. 50 ]

The number of results to return per page. Defaults to 20, minimum 1, maximum 50.

Default:20
starting_afterstring

The cursor value from pages.next.starting_after in a previous response. Used to paginate through results.

Headers
Intercom-Versionstring(intercom_version)

Intercom API version.
If you omit the header, the API uses the version set in your app package, and 1.0 if none is set.

Enum:"1.0""1.1""1.2""1.3""1.4""2.0""2.1""2.2""2.3""2.4"
Example:2.18
curl -i -X GET \
  'https://api.intercom.io/auth_tokens?per_page=20&starting_after=string' \
  -H 'Authorization: Bearer <YOUR_TOKEN_HERE>' \
  -H 'Intercom-Version: 2.18'

Responses

successful

Bodyapplication/json
typestring

The type of object - list.

Value:"list"
Example:"list"
dataArray of objects(Auth Token)

An array of auth token objects.

pagesobject

Pagination information.

Response
{
  "type": "list",
  "data": [
    { … }
  ],
  "pages": {
    "type": "pages",
    "per_page": 20,
    "next": { … }
  }
}