rest_tokens verifiedcriticalWritten by the Hub
REST API tokens
Tokens that authorise the REST API — the only credentials it accepts, stored in clear text.
In detail
Four columns, and they are the whole access control of the API. The console account does not work against /v1/*; only a token from this table does, presented as Authorization: Bearer. Tokens are stored as plain text and, being in the cluster database, are valid on every node. There is no scope column: a token is all-or-nothing, so anything holding one can pause a customer's sending, fail their mail or inject new mail. Hub will hold one per node, and the catalogue should say plainly that it is a credential of the same weight as the console password.
What happens if you get it wrong
A token leaks.The holder can pause, fail or inject mail on every node of the cluster; there is no scope to limit the damage and no record of what a token has done beyond the console access log.inference · inference