Skip to main content
The access tokens API allows you to list, create, modify, and delete access tokens programmatically. When using access tokens to manage access tokens, the following restrictions apply:
  • Personal tokens can see all service tokens and other personal tokens created by the same team member. If the personal token has the “Admin” role, it may also see other member’s personal tokens. To learn more, read Personal tokens.
  • Service tokens can see all service tokens. If the token has the “Admin” role, it may also see all personal tokens. To learn more, read Service tokens.
  • Tokens can only manage other tokens, including themselves, if they have “Admin” role or explicit permission via a custom role. To learn more, read Personal access token actions.
Several of the endpoints in the access tokens API require an access token ID. The access token ID is returned as part of the Create access token and List access tokens responses. It is the _id field, or the _id field of each element in the items array. To learn more about access tokens, read API access tokens.