Tokens

Manages the current user's personal access tokens (PATs) used to authenticate API requests: creating, listing, and revoking tokens. These endpoints require a Keycloak (Bearer JWT) session and cannot themselves be called with a personal access token.

📄️ Creates a new personal access token for the current user.

The plaintext token value is returned only once, in this response's `token` field; it is not

📄️ Returns the current user's personal access tokens.

Only token metadata is returned; the plaintext token value is never included after creation.

📄️ Revokes (deletes) one of the current user's personal access tokens.

Once revoked, the token can no longer be used to authenticate. This cannot be undone.