Mint the credential the command line tool, CI and the API use to talk to one project.
Who this is for
Owners and admins.
Before you start
Decide what the token needs to do. Giving it more abilities than the job needs is the difference between a leaked CI token that can read strings and one that can start paid translation runs.
Steps
Open the project, then Settings → Developer.
Under API tokens ("Project-owned tokens for the CLI and CI. The token value is shown only once, at creation."), select New token.
Give it a Name that says where it will live, such as
ci-deploy.Choose its Abilities.
Choose an Expiry.
Create it.
What happens next
Copy your new API token appears with the token value. This is the only time you will ever see it; it is stored hashed and cannot be recovered. Put it straight into wherever it belongs, such as your CI secret store.
Afterwards the token is listed by name, ability and expiry, and when it was last used. You can revoke it at any time; revoking is immediate.
If it doesn't work
If you close the dialog without copying, the token is unrecoverable. Delete it and mint another.
If New token is not offered, you do not have permission to manage tokens in this project.
Tokens are project-owned, not personal. Removing the person who minted one does not revoke it; revoke it explicitly.
Related
The command line tool
The public API
Project developer settings