Token

  • Whitelist of IPv4/IPv6 addresses or CIDR ranges; empty means unrestricted

  • Globally unique boost.space identifier for this record (UUID-like)

  • Creation timestamp

  • ID of user who created this record

  • Whether the token was created with a custom module scope; it stays true after all its scoped modules are deleted, so such a token reaches no custom module data

  • Human-readable description of the token's purpose

  • Unique identifier - primary key

  • When true, this token is an MCP (Model Context Protocol) token for AI integrations

  • Per-module CRUD permissions granted to this token

    Properties: 10
  • Default conflict-resolution priority across tokens; lower value takes precedence

  • Data scope of this token, one key per dimension. Immutable after creation — to change it, create a new token.

    Properties: 1
  • Scope dimensions that restrict this token, derived server-side. A dimension stays listed even after all its targets are deleted, so such a token can access no data of that dimension at all.

  • Bearer token value used in the Authorization header

  • ID of the user this token authenticates on behalf of