API Reference
Getting Started
Core Concepts
Backend API — Guides
Frontend API — Guides
OAuth & OpenID Connect — Guides
Enterprise: SSO & SCIM — Guides
Webhooks — Guides
SDKs
Backend API (BAPI)
Frontend API (FAPI)
Dashboard API
Public API
SCIM
OIDC
Platform

Actor Tokens

AdminUpdated Sep 11, 2026

Actor Tokens

Backend API — secret key (Authorization: Bearer sk_…).

2 routes. Each row is one endpoint with its explanation, required scope, and whether it honours the Idempotency-Key header.

Method & path

Scope

Idem

Explanation

POST /v1/actor_tokens

impersonation:write

Mint a one-time actor token; the redeemed session carries the RFC 8693 act claim naming the impersonator. Always audited.

POST /v1/actor_tokens/:id/revoke

impersonation:write

Revoke an unredeemed actor token so it can no longer be exchanged for a session.

Was this page helpful?