API tokens

All token endpoints require an admin session 👤 – a token cannot create further tokens.

Token object

{
  "id": 3,
  "name": "Shop-Sync",
  "prefix": "ic_Ab3dEf4",
  "can_write": true,
  "created_at": 1791191665,
  "last_used_at": 1791195000
}

Field	Type	Description
prefix	string	The first 10 characters of the token, for recognizing it
can_write	bool	false = GET endpoints only
last_used_at	int | null	Time of last use

GET /tokens 👤

List of all tokens (without plain text).

POST /tokens 👤

{ "name": "Shop-Sync", "can_write": true }

Response 201:

{
  "token": { "id": 3, "name": "Shop-Sync", "prefix": "ic_Ab3dEf4", "can_write": true, "created_at": 1791191665, "last_used_at": null },
  "secret": "ic_Ab3dEf4…vollständiger-token…"
}

⚠️ secret is only delivered in this response. It cannot be retrieved afterwards.

DELETE /tokens/{id} 👤

Revokes the token immediately. 204.

---