Skip to content
Boomin Boomin Developers

Token Commands

Platform tokens are private server-side credentials for servers and agents. They are different from Partner Connect public keys.

Create

Section titled “Create”
Terminal window
npx @boomin/cli token create \
  --name "Distribution Agent" \
  --scopes org:read,enrollments:read,enrollments:write,distributions:read,distributions:write,distributions:launch,deployments:read

The secret is shown once. Mint the narrowest key that does the job — distributions:launch is the scope that spends money, so keep it off keys that only read.

Use --save only for local smoke testing:

Terminal window
npx @boomin/cli token create \
  --name "Local Smoke" \
  --scopes org:read,distributions:read,deployments:read \
  --save

List

Section titled “List”
Terminal window
npx @boomin/cli token list
npx @boomin/cli token list --json

Listing returns token metadata only. Secrets cannot be retrieved after creation.

Revoke

Section titled “Revoke”
Terminal window
npx @boomin/cli token revoke <token_id>

Revoked tokens return 401 on Platform API requests.

Rotate

Section titled “Rotate”
Terminal window
npx @boomin/cli token rotate <token_id>

Rotation revokes the old token and creates a replacement with the same scope set.