Machine-to-machine credentials that let your services and scripts call the API on this organization's behalf. Each token carries only the scopes you choose. The secret is shown once, when you create it — after that only its prefix is ever displayed.
3 active in Northwind
| Name | Scopes | Created | Last used | Actions |
|---|---|---|---|---|
|
CI deploy bot
ff_tok_EXAMPLE1…
|
apps:read
apps:deploy
|
14 Mar 2026 | 2 min ago | |
|
Metrics exporter
ff_tok_EXAMPLE2…
|
metrics:read
|
2 Feb 2026 | 6 days ago | |
|
Backup script
ff_tok_EXAMPLE3…
|
storage:read
+2 more
|
9 Jan 2026 | Never used |
Contract. Rows come from GET /api/organizations/{orgId}/tokens
(backend/security/src/routes/api-tokens.ts). Each item exposes
name, token_prefix, scopes, created_at,
expires_at — the raw secret is never returned by list, only the prefix. Revoke is
DELETE /api/organizations/{orgId}/tokens/{tokenId}.
⚠ "Last used" is not backed yet — this frame proposes it. The token record has no
last_used_at field today. Approving this frame commissions that field (updated on
introspection/use) so operators can spot dormant or leaked credentials. Until it exists the
column reads "—" for every token; it must not fabricate activity.
Neutral by contract. No identity/authorization vendor is named anywhere — these are
FuzeFront service tokens, full stop.