Create a scoped access token
Creates an opaque bearer token that expires exactly one hour after issuance and is restricted to the requested repositories. Repository IDs are validated atomically against the API-key owner’s current access; the request fails if any ID is missing or inaccessible. Repository IDs are returned by GET /api/repos.
This endpoint requires a Sourcebot API key. Scoped access tokens, OAuth tokens, and browser sessions cannot mint another scoped access token. The returned token is independent of the API key after issuance and cannot be refreshed.
Authorizations
Bearer authentication header of the form Bearer <token>. The token may be a Sourcebot API key, OAuth access token, or scoped access token, subject to endpoint requirements.
Body
Repository IDs to bind to the token. Every ID must identify a repository accessible to the API-key owner.
1x > 0Response
Scoped access token created. The opaque token value is returned only in this response.
Identifier used to revoke the token.
Opaque bearer token. This value is returned only when the token is created.
^sbst_1x > 0
