Developer Access Tokens
Developer Access Tokens (Personal Access Tokens) allow you to authenticate with the SyAuth Management API programmatically.
Difference from API Tokens
Developer Access Tokens are personal tokens linked to your developer account. They grant access to the Management API to manage all your workspaces, clients, and configuration.
API Tokens (found in Workspace settings) are scoped to a single workspace and used for application-level operations like registering end-users.
Overview
You can use Developer Access Tokens to automate:
- Workspace Management: Create and configure workspaces via API.
- User Management: Import or manage developers and team members.
- OAuth Clients: Programmatically create and rotate client credentials.
- CI/CD Integration: Automate deployment of configuration.
Authentication
All requests to the Developer API must include the X-Developer-Token header.
curl -H "X-Developer-Token: syat_..." https://api.syauth.com/api/v1/developer/...
Managing Tokens
You can create, view, and revoke tokens in the Settings > General section of the SyAuth Dashboard.
Available Scopes
| Scope | Description |
|---|---|
api | Full API Access. (Default) |
read_workspaces | View workspace details. |
write_workspaces | Create, update, or delete workspaces. |
read_clients | View OAuth client configurations. |
write_clients | Create or modify OAuth clients. |
read_users | View end-user profiles. |
write_users | Create or update end-users. |
read_groups | View user groups. |
write_groups | Create or modify groups. |
read_templates | View email templates. |
write_templates | Edit email templates. |