Personal access tokens
A personal access token is a credential that a command-line tool such as Maven or Gradle uses instead of your account password. The token authenticates as your account.
A token starts with cs_pat_. It's shown only once, when it's created.
Where tokens are created
You create a token in the product that uses it, where you also decide what it can access. For Artifex, see Tokens.
A token is limited in three ways:
- It works only with the product that it was created in.
- It can access only what you chose for it in that product, and never more than you can access yourself.
- It stops working when it expires or when you revoke it.
See and revoke your tokens
The Personal access tokens page lists every token you hold, across products, with its name, its product, when it was created, when it was last used, and when it expires. The token value isn't shown.
To revoke a token, follow these steps:
Go to Personal access tokens.
In the row of the token, click Revoke.
Click Revoke to confirm.
A revoked token is invalidated immediately, and tools that use it fail to authenticate. Create a token in the product and update those tools.
Token creation and revocation appear in your activity.