| Method |
Path |
Description |
| GET/POST |
/api/auth/api-keys |
List / create (secret returned once) |
| DELETE |
/api/auth/api-keys/:keyId |
Revoke |
Bearer token for console APIs and data API (rules bypassed). See Personal access tokens.
| Method |
Path |
Description |
| GET/POST |
/api/projects/:projectId/service-tokens |
List / create (secret once) |
| DELETE |
/api/projects/:projectId/service-tokens/:tokenId |
Revoke |
Data API + POST /api/p/:projectId/auth/verify only. See Service tokens.
|
PAT kfx_ |
Service kfxs_ |
Project JWT |
Console /api/* |
Yes |
No |
No |
Data /api/p/* |
Yes, bypass rules |
Yes, bypass rules |
Yes, rules apply |
auth/verify |
Not the intended caller |
Yes |
No |
| Ship in a client app |
No |
No |
Yes |