API tokens

All endpoints require authentication with admin or owner role. See Authentication.

List tokens

GET /api/teams/:teamId/tokens

Returns all API tokens for the team. Token values are not included — only metadata like name, last used, and creation date.

POST /api/teams/:teamId/tokens

string

required

Descriptive name for the token (e.g., “Production Service”)

Returns the full token value starting with obk_. This is the only time the raw token is shown — store it securely.

DELETE /api/teams/:teamId/tokens/:tokenId

Immediately revokes the token. Any service using this token will lose access.