Tokens API

Create a token

POST /api/v1/tokens

Request body:

{
  "name": "CI Pipeline",
  "scopes": ["write:secrets"],
  "ttlDays": 90
}

Field	Type	Required	Description
`name`	string	Yes	Human-readable name (max 100 chars)
`scopes`	string[]	Yes	`read:secrets`, `write:secrets`, or `admin`
`ttlDays`	number \| null	No	Days until expiry. `null` = no expiry

Response 201:

{
  "success": true,
  "data": {
    "id": "64b1f2...",
    "name": "CI Pipeline",
    "rawToken": "env_live_...",
    "displayPrefix": "env_live_ae3",
    "scopes": ["write:secrets"],
    "expiresAt": "2026-11-18T00:00:00.000Z"
  }
}

List tokens

GET /api/v1/tokens

Returns all active tokens for the authenticated user. Response 200:

{
  "success": true,
  "data": [
    {
      "id": "64b1f2...",
      "name": "CI Pipeline",
      "displayPrefix": "env_live_ae3",
      "scopes": ["write:secrets"],
      "createdAt": "2026-08-18T10:00:00.000Z",
      "expiresAt": "2026-11-18T00:00:00.000Z",
      "lastUsedAt": "2026-08-20T09:00:00.000Z"
    }
  ]
}

Revoke a token

DELETE /api/v1/tokens/:id

Permanently deletes the token. This action is irreversible. Response 200:

{ "success": true }