Skip to main content

Create a scoped, expiring personal access token

POST 

/api/v1/personal-access-tokens

Requires same-origin proof for cookie requests and a normal session. The raw bearer is returned only in this 201 response; personal access tokens cannot manage credentials, including other tokens.

Request​

Responses​

Token created; copy accessToken now

Response Headers
    X-Request-Id

    Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.