Organization Tokens API
The Organization Tokens API manages organization-scoped personal access tokens for organization members.
Quick Navigation
Overview
This module provides:
- Organization-scoped token creation
- Admin view of all member tokens
- Token revocation (by owner or admin)
Base Path
All organization token endpoints are prefixed with /api/v1/organizations/{org_id}/tokens
Authentication
All endpoints require authentication:
Authorization: Bearer <access_token>
Permissions
- Token creation: Any organization member
- List tokens: Organization administrators only
- Revoke tokens: Token owner or organization administrators
Endpoints
| Method | Endpoint | Description |
|---|---|---|
| POST | / | Create organization-scoped token |
| GET | / | List organization member tokens (admin only) |
| DELETE | /{token_id} | Revoke organization member token |
Internal Notes
- All endpoints are fully implemented
- Token expiration uses organization settings (access_token_expire_minutes)
- Token shown only once at creation
- Admins can view and revoke any member token
Swagger Documentation
Interactive API documentation available at: /docs#/organization-tokens