Access Tokens
Published Updated
What is Access Tokens?
Tokens generated for mobile PWA access and remote connections. Each can be scoped (read-only, queue-only, full access) and revoked individually.
Settings → Access Tokens lets you generate, manage, and revoke tokens. Tokens authenticate remote and mobile connections to your Orbit instance. Scoping limits what a token can do — read-only for status checks, queue-only for approvals, full access for everything. Revoke immediately if a device is lost or compromised.
How it relates to Orbit
Orbit stores service tokens in its Vault and uses them to authenticate connected integrations. See Vault & Secrets for details.
When you would use it
You manage Access Tokens when setting up new devices, retiring old ones, or scoping access for different use cases.
Common operations
- Generating a token for mobile setup
- Revoking a token from a lost or compromised device
- Creating limited-scope tokens for shared access
Related terms
Where this is taught
No learning path uses this term yet. Browse the Learning Atlas for guided sequences through related ideas.