CreateAccessTokenResponse
Response to a token-creation request. The plaintext token is shown only
here and is never recoverable afterwards.
Shape
access_tokenAccessTokenView
- The AccessTokenView schema
- access_token_idAccessTokenId (string · uuid)
- created_atstring
- namestring
- principal_idstring
- principal_kindTokenPrincipalKinduserservice_accountagentThe kind of principal an access token authenticates as.
- scopesarray of string
- expires_atstring or nulloptional
- last_used_atstring or nulloptional
oauthAccessTokenOAuth or nulloptionalPresent when an app connected through sign-in minted this token. Revoking it disconnects the app.
- The AccessTokenOAuth schema
- client_namestring
- grant_idOAuthGrantId (string · uuid)
- resource_scope_idstring or nulloptional
- resource_scope_typeScopeTypegrouprepositoryor nulloptional
- tokenstringThe plaintext token. Store it securely — it is not shown again.
Example
Synthesized example{
"access_token": {
"access_token_id": "97e1dcab-2c71-42f5-9d03-1e6fcda72799",
"created_at": "2026-10-11T14:58:45Z",
"name": "payments-api",
"principal_id": "70ef2a90-dea2-4d68-a987-713367c4bc81",
"principal_kind": "user",
"scopes": [
"scopes-26d5",
"scopes-9ffe"
],
"expires_at": "2026-10-13T01:32:38Z",
"last_used_at": "2026-10-08T20:55:20Z",
"oauth": {
"client_name": "payments-api",
"grant_id": "9c74f954-d0e7-4484-8de9-0403256a98d5"
},
"resource_scope_id": "eff61b00-1991-4132-a7d9-0cc850326a42",
"resource_scope_type": "group"
},
"token": "token-e9b6"
}
Graph
Used inside
No schema contains this one.
Contains
Used by
Sent by 0 operations
No operation takes it as a request body.