Reset Token
POST/users/:user_id/reset-token
Generate a new API token for a user. Platform admin access only.
The returned raw_token is the value to use as an x-api-key header
in SDK / CI contexts. It is shown exactly once — store it in a secrets
manager now. Only a SHA-256 hash is persisted in the database; the
plaintext is never stored and cannot be recovered. Calling this endpoint
again issues a new token and immediately invalidates the previous one.
Returns 404 if the user does not exist, and 403 if the caller is not a platform admin.
Request
Responses
- 200
- 403
- 404
- 422
Successful Response
Forbidden
Not Found
Validation Error