Skip to main content
Every request authenticates with an org API token, sent as a Bearer credential:

Create a token

In the dashboard, go to Developers → API tokens and create one. You choose a role for the token and, optionally, an expiry.
The full token is shown once at creation. Store it somewhere safe. Sentivel keeps only a hash and can never show it again. If you lose it, revoke it and create a new one.
A token is scoped to a single workspace and acts at its role. There is no separate permission language to learn: it is exactly the roles your teammates have.

What each role can do

A token is never an owner. Billing and workspace deletion are not API operations.

Errors