Skip to main content
Endpoints to manage API access tokens.

GET /tenants//tokens

List all tenant tokens. Required scope: settings:read

Request

Response

The full token is never returned by this endpoint — it is only shown once, at creation.

POST /tenants//tokens

Create a new token. Required scope: settings:write

Request

Body

Response

The token field is only returned at creation. Store it immediately.

DELETE /tenants//tokens/

Revoke a token. Required scope: settings:write

Request

Response

Available scopes

Best practices

Naming

Use descriptive names:
  • Production API - Main token
  • CI/CD Corpus Sync - Specific integration
  • Analytics Dashboard - Read-only access

Minimal scopes

Expiration

For temporary tokens (CI/CD, tests):

Rotation

Review and rotate your tokens regularly:
  1. Create a new token
  2. Update your integrations
  3. Verify everything works
  4. Delete the old token