API reference

API tokens

Credentials for scripts and CI. A token acts within its workspace, with the role it was given.

Active API tokens of an organisation

GET/v1/orgs/{org}/tokens

API token or dashboard session

Active API tokens of an organisation.

Path parameters

orgstringpathrequired
Organisation slug

Responses

200ApiToken[]

Fields of ApiToken

created_atdate-timerequired
expires_atdate-time | null
iduuidrequired
last_used_atdate-time | null
namestringrequired
prefixstringrequired
The first characters of the token, enough to recognise it.
roleRolerequired

curl "https://api.infraflow.app/v1/orgs/acme/tokens" \
  -H "Authorization: Bearer $INFRAFLOW_TOKEN"

Response · 200

[
  {
    "created_at": "2026-01-15T09:30:00Z",
    "expires_at": "2026-01-15T09:30:00Z",
    "id": "0197b2a4-5c1e-7d3a-9f10-4b6c8e2a1d55",
    "last_used_at": "2026-01-15T09:30:00Z",
    "name": "my-app",
    "prefix": "string",
    "role": "owner"
  }
]

Create an API token

POST/v1/orgs/{org}/tokens

API token or dashboard session

Create an API token.

Path parameters

orgstringpathrequired
Organisation slug

Request body · application/json

expires_in_daysinteger | null
Days until the token stops working. Omit for a token that does not expire.
namestringrequired
roleRolerequired
What the token may do. owner is not available to tokens.

Responses

201

Revoke an API token

DELETE/v1/orgs/{org}/tokens/{id}

API token or dashboard session

Revoke an API token. It stops working immediately.

Path parameters

orgstringpathrequired
Organisation slug
iduuidpathrequired

Responses

204no body
404Problem

curl -X DELETE "https://api.infraflow.app/v1/orgs/acme/tokens/0197b2a4-5c1e-7d3a-9f10-4b6c8e2a1d55" \
  -H "Authorization: Bearer $INFRAFLOW_TOKEN"

Active API tokens of an organisation

GET/v1/orgs/{org}/tokens

API token or dashboard session

Active API tokens of an organisation.

Path parameters

orgstringpathrequired
Organisation slug

Responses

200ApiToken[]

Fields of ApiToken

created_atdate-timerequired
expires_atdate-time | null
iduuidrequired
last_used_atdate-time | null
namestringrequired
prefixstringrequired
The first characters of the token, enough to recognise it.
roleRolerequired

curl "https://api.infraflow.app/v1/orgs/acme/tokens" \
  -H "Authorization: Bearer $INFRAFLOW_TOKEN"

Response · 200

[
  {
    "created_at": "2026-01-15T09:30:00Z",
    "expires_at": "2026-01-15T09:30:00Z",
    "id": "0197b2a4-5c1e-7d3a-9f10-4b6c8e2a1d55",
    "last_used_at": "2026-01-15T09:30:00Z",
    "name": "my-app",
    "prefix": "string",
    "role": "owner"
  }
]