Token

allowedIps
Type: array of string

Whitelist of IPv4/IPv6 addresses or CIDR ranges; empty means unrestricted
boostId
Type: string
read-only

Globally unique boost.space identifier for this record (UUID-like)
created
Type: stringFormat: date-time
read-only

Creation timestamp
createdUserId
Type: integer
read-only

ID of user who created this record
description
Type: string

Human-readable description of the token's purpose
id
Type: integer
read-only

Unique identifier - primary key
mcp
Type: boolean

When true, this token is an MCP (Model Context Protocol) token for AI integrations
permissions
Type:

Per-module CRUD permissions granted to this token

Properties: 10
priority
Type: integer

Default conflict-resolution priority across tokens; lower value takes precedence
token
Type: string
read-only

Bearer token value used in the Authorization header
type
Type: stringenum

Kind of token; token is a private API token. handoff is an ACT sign-in minted by POST /auth/handoff/exchange: it expires, logout revokes it, it cannot be created via POST /auth/{userId}/token, the token list leaves it out and its value is never returned, and as the caller it may only read, update or delete itself

values
tokenoauth_authorization_codechatkithandoff
userId
Type: integer
read-only

ID of the user this token authenticates on behalf of