Skip to main content
Personal access tokens (PATs) authenticate programmatic access to Ona via the CLI or SDK.

Create a token

  1. Go to Personal access tokens
  2. Click “New Token”
  3. Enter a description and select expiration (30, 60, or 90 days)
  4. Choose an access level:
    • Read-only - the token can only read data. All write operations are denied.
    • Read & Write - the token can both read and modify data.
  5. Click “Create” and copy the token immediately - you won’t see it again

Use a token

Or set the environment variable:

Permissions

Tokens inherit your user account’s permissions and can be scoped to one of two access levels: The access level is set at creation time and cannot be changed afterward. To switch access levels, revoke the existing token and create a new one.

Security

  • Treat tokens like passwords - don’t share or store insecurely
  • Use the shortest expiration that meets your needs
  • Revoke unused tokens
  • Actions are logged in audit logs with the token ID

Examples

CI/CD integration

Authenticate your CI/CD pipeline to create and manage environments.

Scripted environment management

Manage environments programmatically for bulk operations.

Third-party tool integration

Create environments from external tools.