Sign in
personal-access-tokens

POST /v1/users/me/pats — mint a new personal access token (session-auth only).

The raw token is returned once in the response. Only its SHA-256 hash plus a short display prefix are persisted. PATs act as the authenticated user across the platform — they cannot be created by other PATs to keep the trust root anchored at a verified browser session, matching GitHub/Stripe semantics.

post/v1/users/me/pats

Request body

expires_atstring date-time nullable

Optional ISO-8601 expiry. Omitted = no expiry.

namestring required

Human-readable label for the token (e.g. "macbook-cli").

Response

PAT created (raw token returned once)

created_atstring date-time required
expires_atstring date-time nullable
idstring uuid required
namestring required
prefixstring required
tokenstring required

Raw bearer token in the form msb_pat_<env>_<random>. Surfaced once.

Changes

No recorded changes to this endpoint across all 1 revision of this API.