Tokens

Service token management for CI/CD

List service tokens

GET /api/v1/tokens

Returns all service tokens created by the user

Operation ID: listTokens · Authentication: Authorization: Bearer <token>

Responses

Response body (200)

Example

curl -X GET "https://api.keyenv.dev/api/v1/tokens" \
  -H "Authorization: Bearer $KEYENV_TOKEN"

Create service token

POST /api/v1/tokens

Creates a new service token for CI/CD or programmatic access.

Important: The token value is only returned once upon creation. Store it securely.

Operation ID: createToken · Authentication: Authorization: Bearer <token>

Request body

application/json (required)

Responses

Example

curl -X POST "https://api.keyenv.dev/api/v1/tokens" \
  -H "Authorization: Bearer $KEYENV_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"name":"string","team_id":"00000000-0000-0000-0000-000000000000","scopes":["read"],"expires_at":"string"}'

Delete service token

DELETE /api/v1/tokens/{tokenId}

Permanently revokes a service token

Operation ID: deleteToken · Authentication: Authorization: Bearer <token>

Path parameters

Responses

Example

curl -X DELETE "https://api.keyenv.dev/api/v1/tokens/{tokenId}" \
  -H "Authorization: Bearer $KEYENV_TOKEN"

Rotate service token

POST /api/v1/tokens/{tokenId}/rotate

Rotates a service token, creating a new one with an optional grace period during which the old token remains valid. This allows seamless token rotation in CI/CD systems.

Operation ID: rotateToken · Authentication: Authorization: Bearer <token>

Path parameters

Request body

application/json

Responses

Response body (200)

Example

curl -X POST "https://api.keyenv.dev/api/v1/tokens/{tokenId}/rotate" \
  -H "Authorization: Bearer $KEYENV_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"grace_period_minutes":5}'