Skip to main content

Developer Access Tokens

Developer Access Tokens (Personal Access Tokens) allow you to authenticate with the SyAuth Management API programmatically.

Difference from API Tokens

Developer Access Tokens are personal tokens linked to your developer account. They grant access to the Management API to manage all your workspaces, clients, and configuration.

API Tokens (found in Workspace settings) are scoped to a single workspace and used for application-level operations like registering end-users.

Overview

You can use Developer Access Tokens to automate:

  • Workspace Management: Create and configure workspaces via API.
  • User Management: Import or manage developers and team members.
  • OAuth Clients: Programmatically create and rotate client credentials.
  • CI/CD Integration: Automate deployment of configuration.

Authentication

All requests to the Developer API must include the X-Developer-Token header.

curl -H "X-Developer-Token: syat_..." https://api.syauth.com/api/v1/developer/...

Managing Tokens

You can create, view, and revoke tokens in the Settings > General section of the SyAuth Dashboard.

Available Scopes

ScopeDescription
apiFull API Access. (Default)
read_workspacesView workspace details.
write_workspacesCreate, update, or delete workspaces.
read_clientsView OAuth client configurations.
write_clientsCreate or modify OAuth clients.
read_usersView end-user profiles.
write_usersCreate or update end-users.
read_groupsView user groups.
write_groupsCreate or modify groups.
read_templatesView email templates.
write_templatesEdit email templates.