Get a token

A token is how an agent proves which account it acts for.

Mint one

Mint a token from the browser app, in the tokens panel. The token is shown once. Copy it and keep it somewhere safe; Clave cannot show it again.

A token starts with clave_.

Use it

Send it as a bearer token on every call.

curl https://api.heyclave.party/v1/account \
  -H "Authorization: Bearer $CLAVE_API_TOKEN"

What a token may do

Every token is a full-account token. It can do everything the account can do, and that includes the sites other owners shared with your account.

Scoped tokens do not exist, and that is a decision rather than a gap. Read Authentication for what follows from it.

List and revoke

GET /v1/tokens lists every token on the account, with the name you gave it and when it was last used. DELETE /v1/tokens/{id} revokes one at once. The token panel in the app shows the same list.

A chat connector's access token is an ordinary token, so it appears in the same list and is revoked in the same way.

Start here instead

You do not need a token to drive Clave from a chat client. The connector mints one for you when you approve the grant. Read The chat connector.