> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trelent.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Token management

> Generate, list, and revoke API access tokens programmatically.

<Warning>
  These endpoints are intended for **administrators and platform operators** only. Most users will receive a pre-configured token and do not need to interact with these APIs directly.
</Warning>

The Data Ingestion API uses **JWT-based access tokens** to authenticate requests. Administrators can generate tokens with specific permission scopes, list active tokens, and revoke tokens that are no longer needed.

## Available permissions

Tokens are scoped to specific capabilities. Request only the permissions your integration requires.

| Permission          | Description                                          |
| ------------------- | ---------------------------------------------------- |
| `workflow:*`        | Full workflow access (video and document processing) |
| `workflow:video`    | Video processing jobs only                           |
| `workflow:document` | Document processing jobs only                        |
| `file:*`            | Full file management access                          |
| `file:list`         | List uploaded files                                  |
| `file:upload`       | Upload new files                                     |
| `token:*`           | Full token management access                         |
| `token:generate`    | Generate new tokens                                  |
| `token:list`        | List existing tokens                                 |
| `token:revoke`      | Revoke tokens                                        |

<Warning>
  Tokens with `token:generate` can only create tokens with permissions equal to or less than their own scope. A token cannot escalate privileges.
</Warning>

## Common workflows

<CardGroup cols={2}>
  <Card title="Generate tokens" icon="key" href="/data-ingestion/tokens/generate">
    Create new access tokens with scoped permissions
  </Card>

  <Card title="List tokens" icon="list" href="/data-ingestion/tokens/list">
    View active and expired tokens
  </Card>

  <Card title="Revoke tokens" icon="ban" href="/data-ingestion/tokens/revoke">
    Invalidate tokens before expiration
  </Card>
</CardGroup>