Actions120
- Activity Actions
- API Token Actions
- Assessment Actions
- Assessment Comment Actions
- Assessment Phase Actions
- Assessment Section Actions
- Assessment Section Event Actions
- Assessment Section Template Actions
- Assessment Task Set Actions
- Assessment Template Actions
- Assessment Template Checklist Actions
- Assessment User Actions
- Checklist Actions
- Checklist Category Actions
- Checklist Category Template Actions
- Checklist Template Actions
- Client Actions
- Custom Field Actions
- Document Actions
- Finding Actions
- Finding Event Actions
- List finding events
- Create a finding comment
- Update a finding comment
- Create a finding retest
- Update a finding retest
- Create a finding retest inquiry
- Update a retest inquiry
- Create a finding retest cancelled event
- Update a retest cancelled event
- Create a finding review event
- Create a finding retest review event
- Create a remediation status change
- Update a remediation status change
- Finding Layout Actions
- Finding Template Actions
- Language Actions
- Notification Actions
- Output File Actions
- Reaction Actions
- Role Actions
- Snippet Actions
- Tag Actions
- Target Actions
- Task Actions
- Task Set Actions
- Team Actions
- Team User Actions
- Test Case Actions
- Test Case Template Actions
- Theme Actions
- Tool Finding Actions
- Tool Target Actions
- User Actions
API Token → Create an API token
AI-generatedSummary
Creates an API token with the specified name and abilities, optionally setting its expiration, scope, client or assessment restrictions, and owner. The token is created for the authenticated user unless an eligible admin specifies another user.
Inputs
- Name (required) — Token name, up to 191 characters.
- Abilities (required) — One or more ability strings, each a subset of the creating token’s abilities; cannot include
api_token:readorapi_token:write. - Expires at — Optional ISO 8601 expiration date after now and no later than the creating token’s expiration.
- Scope — Optional scope:
0grants access to all clients and assessments available to the user;1restricts access to the selected clients;2restricts access to the selected assessments. - Clients — Optional client IDs for a client-restricted scope.
- Assessments — Optional assessment IDs for an assessment-restricted scope.
- User id — Optional existing user ID. Creates the token for that user; only admins can create tokens for other users.
Output shape
A single API response record for the created token.
The source sends the name and abilities in the request body and adds populated optional fields from Additional Fields. Exact response fields and whether the token secret is included are not shown.