{
  "opencollection": "1.0.0",
  "info": {
    "name": "Pulumi APIs AccessTokens API",
    "version": "1.0.0"
  },
  "items": [
    {
      "info": {
        "name": "AccessTokens",
        "type": "folder"
      },
      "items": [
        {
          "info": {
            "name": "ListOrgTokens",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "{{baseUrl}}/api/orgs/:orgName/tokens",
            "params": [
              {
                "name": "orgName",
                "value": "",
                "type": "path",
                "description": "The organization name"
              },
              {
                "name": "filter",
                "value": "",
                "type": "query",
                "description": "Filter tokens by status (e.g., include expired tokens)"
              }
            ]
          },
          "docs": "Retrieves all access tokens created for an organization. Organization tokens provide CI/CD automation access scoped to the organization rather than tied to individual user accounts. The response includes token metadata such as name, description, creation date, last used date, and expiration status. The actual token values are never returned after initial creation. An optional filter parameter can include expired tokens in the results."
        },
        {
          "info": {
            "name": "CreateOrgToken",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "{{baseUrl}}/api/orgs/:orgName/tokens",
            "params": [
              {
                "name": "orgName",
                "value": "",
                "type": "path",
                "description": "The organization name"
              },
              {
                "name": "reason",
                "value": "",
                "type": "query",
                "description": "Audit log reason for creating this token"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            }
          },
          "docs": "Generates a new access token scoped to the organization for use in CI/CD pipelines and automated workflows. Organization tokens belong to the organization rather than individual users, ensuring that access is not disrupted when team members leave.\n\nThe `name` field must be unique across the organization (including deleted tokens) and cannot exceed 40 characters. The `expires` field accepts a unix epoch timestamp up to two years from the present, or `0` for no expiry (default).\n\n**Important:** Th"
        },
        {
          "info": {
            "name": "DeleteOrgToken",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "{{baseUrl}}/api/orgs/:orgName/tokens/:tokenId",
            "params": [
              {
                "name": "orgName",
                "value": "",
                "type": "path",
                "description": "The organization name"
              },
              {
                "name": "tokenId",
                "value": "",
                "type": "path",
                "description": "The access token identifier"
              }
            ]
          },
          "docs": "Permanently revokes and deletes an organization access token. Any CI/CD pipelines or automation using this token will immediately lose access to the organization's resources. This action cannot be undone."
        },
        {
          "info": {
            "name": "ListPersonalTokens",
            "type": "http"
          },
          "http": {
            "method": "GET",
            "url": "{{baseUrl}}/api/user/tokens",
            "params": [
              {
                "name": "filter",
                "value": "",
                "type": "query",
                "description": "Filter tokens by name or description"
              }
            ]
          },
          "docs": "Returns all personal access tokens for the authenticated user. Web-session generated tokens (type 'web') are excluded from the results. Each token in the response includes its ID, description, and lastUsed timestamp. Use the filter query parameter to search tokens by name or description."
        },
        {
          "info": {
            "name": "CreatePersonalToken",
            "type": "http"
          },
          "http": {
            "method": "POST",
            "url": "{{baseUrl}}/api/user/tokens",
            "params": [
              {
                "name": "reason",
                "value": "",
                "type": "query",
                "description": "Tracks the context that triggered token creation (e.g., redirect URL or referral source)"
              }
            ],
            "body": {
              "type": "json",
              "data": "{}"
            }
          },
          "docs": "Creates a new personal access token for the authenticated user. The request body includes a description for the token and an optional expiration time. The response includes the token ID and the tokenValue (prefixed with 'pul-'). The token value is only returned once at creation time and cannot be retrieved later."
        },
        {
          "info": {
            "name": "DeletePersonalToken",
            "type": "http"
          },
          "http": {
            "method": "DELETE",
            "url": "{{baseUrl}}/api/user/tokens/:tokenId",
            "params": [
              {
                "name": "tokenId",
                "value": "",
                "type": "path",
                "description": "The access token identifier"
              }
            ]
          },
          "docs": "Permanently deletes a personal access token by its identifier. The token is immediately invalidated and can no longer be used for authentication. Returns 204 on success or 404 if the token does not exist."
        }
      ]
    }
  ],
  "bundled": true
}