Personal access tokens
Create scoped PATs in Settings → Developer for scripts and automation; the secret is shown once—store it securely.
Personal access tokens (PATs) are long-lived Bearer credentials for automation where OAuth is impractical (camera-trap ingest, CI, internal scripts).
Create a PAT
- Open Settings → Developer → Personal access tokens
- Choose a name, optional expiry, and scopes (see Scopes)
- Copy the secret when shown — it is not displayed again
- Call
/api/v1withAuthorization: Bearer aist_pat_…
Rotate and revoke
- Revoke — immediately invalidates the token
- Rotate — mint a new secret; update your script, then revoke the old token
Do not edit scopes in place. Create a new PAT with the scope set you need.
When to prefer OAuth
Use OAuth for any client where an end user signs in (Lightroom, mobile, partner app). PATs are for your own automation on a workspace you control.