Personal Access Tokens API

Manage API tokens used for headless scripts, CLI utilities, and third-party integrations.

1. List User API Tokens

GET /api/v1/auth/tokens Returns metadata for active tokens generated by the current user.

Headers

Authorization: Bearer <token>

Response (`200 OK`)

[
  {
    "id": "tok_01j7abc12",
    "name": "CLI-Backup-Script",
    "last_used_at": "2026-09-19T14:20:00Z",
    "created_at": "2026-09-01T10:00:00Z"
  }
]

2. Generate New API Token

POST /api/v1/auth/tokens Generates a new token string tied to the user’s account.

Request Body

{
  "name": "Home-Assistant-Integration"
}

Response (`201 Created`)

{
  "id": "tok_01j7def34",
  "name": "Home-Assistant-Integration",
  "token": "mtvl_pat_9a8b7c6d5e4f3a2b1c0d",
  "message": "Store this token safely. It will not be shown again."
}

3. Revoke API Token

DELETE /api/v1/auth/tokens/{id} Revokes and invalidates the target token.