Skip to main content
POST

Authorization

string
required
Bearer token for authentication. Format: Bearer qwoty_your_token

Request Body

string
required
A descriptive name for the API token
string
Optional expiration date in ISO 8601 format (e.g., “2024-12-31T23:59:59Z”)
object
Optional permissions configuration for the token

Permissions of write endpoints

A token acts with the permissions of its role. Read endpoints (GET) only need a valid token. Write endpoints check the role and answer 403 when the permission is missing:
403 Forbidden

Response

boolean
Indicates if the operation was successful
object
The created API token object
Last modified on October 28, 2026