Create a personal access token

Scope: token:write

Authorization

bearerAuth

AuthorizationBearer <token>

Personal Access Token (PAT) or Service Access Token (SAT). Pass the token in the Authorization header: Bearer adm_pat_...

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

name?name

URL-safe, human-readable identifier for the token (e.g., "postman-testing"). Must be unique per user within the tenant. Lowercase alphanumeric and hyphens only.

Match^[a-z]([a-z0-9-]{0,61}[a-z0-9])?$

Length1 <= length <= 63

scopes?array<>

The scopes to grant this token. Must be valid scopes allowed for PATs. The server enforces that issued scopes are a subset of the caller's own scopes -- a token cannot grant more access than the user holds.

Itemsitems <= 255

expires_at?expires_at

Optional expiration time. If unset, the token does not expire. Tenant policies may enforce a maximum lifetime.

Formatdate-time

Response Body

`application/json`

curl -X POST "https://admiral.example.com/api/v1/user/tokens" \  -H "Content-Type: application/json" \  -d '{}'

{  "access_token": {    "id": "9f8e7d6c-5b4a-3210-fedc-ba0987654321",    "name": "ci-deploy-key",    "token_type": "TOKEN_TYPE_PAT",    "scopes": [      "deploy:write",      "app:read",      "env:read"    ],    "status": "ACCESS_TOKEN_STATUS_ACTIVE",    "binding_type": "BINDING_TYPE_USER",    "binding_id": "d290f1ee-6c54-4b01-90e6-d701748f0851",    "created_by": "d290f1ee-6c54-4b01-90e6-d701748f0851",    "expires_at": "2026-06-01T00:00:00Z",    "last_used_at": "2025-11-20T14:30:00Z",    "created_at": "2025-09-01T10:00:00Z"  },  "plain_text_token": "string"}

Create a personal access token

Authorization

Request Body

Response Body

200application/json

`application/json`