Service Tokens
Current Teamday service-token guidance for API automation.
Service Tokens
Use service tokens for server-side API automation:
Authorization: Bearer <teamday-service-token>Create, list, and revoke service tokens from Teamday's security settings. Signed-in owners can also use:
| Method | Path | Purpose |
|---|---|---|
GET | /api/service-tokens | List service tokens visible to the signed-in user |
POST | /api/service-tokens | Create a service token |
POST | /api/service-tokens/{id}/revoke | Revoke a service token |
Best practices:
- Use one token per integration.
- Store the token in a secret manager.
- Rotate by creating a replacement, deploying it, then revoking the old token.
- Never put tokens in prompts, mission descriptions, URLs, or logs.