Authentication
Tokens are issued per environment and never expire on their own. Rotating a token revokes the previous one after a five minute overlap.
Header
Authorization: Bearer sk_live_<token>Scopes
| Scope | Grants |
|---|---|
projects:read | List and read projects |
projects:write | Create and update projects |
events:read | Stream delivery events |
Rotating a token
POST https://api.f1-t.oh-honey.org/v2/tokens/rotate
Content-Type: application/json
{ "token_id": "tok_31aC" }Never ship a live token to a browser client. Use a short-lived exchange token instead.