Personal access tokens

Personal access tokens let you authenticate to the Vetrix API on behalf of your account without using your password. Each token carries a name, an optional expiry date, and a set of scopes that limit what it can do. This page covers creating a token, choosing its scopes, copying the token value, reviewing your tokens, and revoking one.

Where to find it

Open Settings, then in the Account group of the settings sidebar select Access Tokens.

URL pattern: gitvetrix.com/settings/tokens

Create a token

Select New token in the top-right corner of the page. The New personal access token dialog opens.
In Token name, enter a name that describes where the token will be used, such as the script or machine that will hold it.
Optionally set an Expiry date (optional). The token remains valid through the end of the date you choose. Leave it blank for a token with no expiry.
Under Scopes, select at least one permission (see Choose scopes below).
Select Generate token.

If the name is missing or no scope is selected, an inline error appears and the token is not created. To close the dialog without creating a token, select Cancel.

Choose scopes

Scopes control what a token is allowed to do. Select only the ones the token needs. They are grouped by resource:

Repository — Read, Write, Admin
Issues — Read, Write
CI — Read, Write
Registry — Read, Write
Administration — Users, System
MCP — Read, Write

At least one scope is required before the token can be generated.

Copy the token value

When the token is created, its value appears once in a highlighted panel at the top of the page, alongside the warning This value will not be shown again.

Select Copy token to copy the value to your clipboard, or select the value and copy it manually.
Store the value somewhere secure, such as your password manager or your tool's secret store.
When you are finished, select the dismiss button on the panel.

Once you dismiss the panel, the value cannot be retrieved again. If you lose it, revoke the token and create a new one.

Review your tokens

Each token you have created appears in a list. Every entry shows:

The token's name and a badge for each of its scopes.
Last used — how long ago the token last authenticated, or Never if it has not been used.
Expires with the expiry date, or No expiry.
Created — how long ago the token was created.

When you have no tokens yet, the page shows No tokens in place of the list.

Revoke a token

In the token's entry, select the revoke button.
In the Revoke token dialog, type the token's name into the confirmation field to enable the revocation.
Select Revoke token to confirm.

A confirmation message reads Token revoked. Any scripts or applications still using that token can no longer authenticate, so replace it wherever it is used.

SSH keys — authenticate Git operations over SSH instead of with a token.