API Tokens

API tokens give scripts, CI/CD, the podstack CLI, and the REST/OpenAI-compatible API access to your account without an interactive sign-in.

What you’ll accomplish

Create an API token and use it to authenticate the podstack CLI.

Prerequisites

• A signed-in account.

Create a token

1. Go to Settings → Tokens.
2. Choose Create.
3. Enter a name and pick an expiry: 7, 30, 90, 180, or 365 days, or never (default is 30 days).
4. Copy the token now — it starts with psk_ and is shown only once.

You can hold up to 5 tokens at a time.

Screenshot: Tokens tab with the create dialog and one-time token reveal.

Use it with the CLI

# Interactive: paste the key when prompted (input is hidden)
podstack auth login

# Or via environment variable (overrides the stored key)
export PODSTACK_API_KEY=psk_xxxxxxxxxxxxxxxxxxxx

# Confirm who you are
podstack auth whoami

The key is stored at ~/.config/podstack/credentials.json (mode 0600, honoring XDG_CONFIG_HOME). The same token authenticates every CLI command — code, models, gpu, train, send/receive. See the CLI Authentication guide.

Use it with the API

Send the token as a bearer credential:

curl https://cloud.podstack.ai/infer/v1/models \
  -H "Authorization: Bearer psk_xxxxxxxxxxxxxxxxxxxx"

Verify it worked

• podstack auth whoami prints your user id and email.
• The token appears in Settings → Tokens with its name and expiry.

Revoke a token

Delete a token from Settings → Tokens to invalidate it immediately. Any CLI or script using it will stop working on the next request.

Troubleshoot

Related

• CLI Authentication
• Settings