internkim
APIEvery endpointTokens

Revoke a token

Revokes one token by name. The token authenticating the call cannot be the one revoked: see the replacement answer first, then revoke the old one with it.

DELETE
/token

Authorization

memberToken
AuthorizationBearer <token>

The tools internkim uses inside a company, callable from outside it. A token belongs to a person, and every call runs as that person, so a token can never do more than its owner can.

The first token is made signed in, from the settings screen. After that a token makes its own successors: POST /token for a new one, DELETE /token for the old one, so a script rotates without a browser. A token can neither mint a rung above its own nor revoke itself. Send Authorization: Bearer <token> on every request.

In: header

Query Parameters

name*string

Revoke a token

Response Body

application/json

text/plain

text/plain

text/plain

text/plain

curl -X DELETE "https://example.com/token?name=string"
{  "forgotten": "string"}

List tokens GET

The names, rungs, expiry and last use of the tokens this token's owner holds. No token value is kept anywhere, so none is answered.

web_fetch POST

Fetch and return the text content of one or more public URLs. Use after web_search when you need the full page content, not just a snippet. Do not fetch localhost or private network addresses — those are blocked. `read` · v1