•
1 min read
•
6 views
Creating Personal Access Tokens with Granular Scopes
How to generate secure SHA-256 API tokens and restrict them to deployments or billing.
### Managing API Tokens
Navigate to **Profile → API Tokens** to create tokens for automation tools, Terraform scripts, or custom billing plugins.
### Supported Scopes
- `deployments:read`: Retrieve list of active and past deployments.
- `deployments:write`: Generate new deployment scripts and trigger password updates.
- `billing:read`: Access invoice history and remaining credit balance.
- `profile:read`: Retrieve user identity and team role information.
### Authorization Header
Authenticate requests by supplying the token as a Bearer header:
```http
GET /api/deployments HTTP/1.1
Host: linwin.site
Authorization: Bearer YOUR_SECRET_TOKEN
```
Was this article helpful to you?