token
Create a scoped API token — the full value is shown once and never again.
skillhub token manages API tokens. token create mints a scoped token for
headless or CI authentication. The full secret is shown once in the
response and never again, so capture it immediately — for example into the
SKILLHUB_TOKEN environment variable your CI reads, or pass it to
login --token.
Scopes control what the token can do: read, publish, admin. Restrict a
token to a single registry with --registry.
Synopsis
skillhub token create [--name <name>] [--scopes <scopes>] [--registry <@owner/slug>]Flags
| Flag | Description |
|---|---|
--name <name> | Token name (e.g. ci) |
--scopes <scopes> | Comma-separated scopes: read, publish, admin |
--registry <@owner/slug> | Restrict the token to one registry (@owner/slug) |
Examples
skillhub token create --name ci --scopes read,publish
skillhub token create --name ci --scopes publish --registry @studio/design-systemsJSON output
With --json, the data object contains:
action— always"create".token— the full secret, shown once.info—{ id, name, prefix (12 chars), scopes[] of read | publish | admin, registryId (uuid|null), lastUsedAt, expiresAt, revokedAt, createdAt }.