GET /tenants//tokens
List all tenant tokens. Required scope:settings:read
Request
Response
The full token is never returned by this endpoint — it is only shown once, at creation.
POST /tenants//tokens
Create a new token. Required scope:settings:write
Request
Body
Response
DELETE /tenants//tokens/
Revoke a token. Required scope:settings:write
Request
Response
Available scopes
Best practices
Naming
Use descriptive names:Production API- Main tokenCI/CD Corpus Sync- Specific integrationAnalytics Dashboard- Read-only access
Minimal scopes
Expiration
For temporary tokens (CI/CD, tests):Rotation
Review and rotate your tokens regularly:- Create a new token
- Update your integrations
- Verify everything works
- Delete the old token