iblai-api-tokenlisted
Install: claude install-skill iblai/api
# iblai-api-token
Manage the organization's **Platform API Tokens** — the keys that authenticate every
ibl.ai API call. List the tokens, create a new Api-Token (the secret is shown only
once), and delete a token by name. Tokens are `platform_key`-scoped, not
agent-scoped.
## Auth & conventions
- **Base URL:** `https://api.iblai.app`
- **Header:** `Authorization: Api-Token $IBLAI_API_KEY` on every request.
- **Path vars:** `{org}` = `$IBLAI_ORG`, `{username}` = `$IBLAI_USERNAME`.
- **Host:** these endpoints live under `…/dm/api/core/…`.
- Not connected yet? Run **`/iblai-api-login`** first to populate `IBLAI_ORG`,
`IBLAI_USERNAME`, and `IBLAI_API_KEY`.
## Reads
- **GET** `https://api.iblai.app/dm/api/core/platform/api-tokens/?platform_key={org}` — list API keys.
## Writes
- **POST** `https://api.iblai.app/dm/api/core/platform/api-tokens/` — create a token (returns the secret only once):
```json
{
"username": "string (required)",
"name": "string (required)",
"key": "",
"platform_key": "{org} (required)",
"created": "ISO datetime (required)",
"expires": "'' or seconds-string (required)",
"expires_in": "seconds-string | undefined"
}
```
- **DELETE** `https://api.iblai.app/dm/api/core/platform/api-tokens/{name}?platform_key={org}` — delete a key by name. Destructive — confirm with the user first.
## Example
Create a new Platform API Token named `prod-integration` (capture the secret from
the response — it is shown only once):
```bash