Create a scoped, expiring personal access token

POST 
/api/v1/personal-access-tokens

Requires same-origin mutation proof and a normal session. The raw bearer is returned only in this 201 response; personal access tokens cannot manage credentials, including other tokens.

Request

Responses

201

Token created; copy accessToken now

400

The multipart shape or Idempotency-Key is malformed

401

The opaque credential is absent, ambiguous, malformed, expired, revoked, or invalid

403

The browser mutation did not originate from this application, or the authenticated member lacks the required permission

413

A configured streaming body or per-file size limit was exceeded. A transport-level rejection may omit the JSON body.

503

A required core dependency is unavailable; retry with bounded backoff