Skip to content

Machine admin

List service tokens

GET/api/w/:wid/service-tokens

Owners. Every token with its scopes, expiry, address pins and last use. Never the token itself.

#Authentication

Session cookie

A signed-in person: the console's session cookie. Every state-changing request also carries the header x-immiscible-csrf: 1, and the member's role decides what it may do. Bearer tokens are ignored on these routes, so no machine credential can reach them.

#Path parameters

widstringrequired

Workspace id