Access token
ID access_token
DatatypeNot PIIDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Bearer token that grants access to an API on behalf of a user or an application, such as an OAuth 2.0 access or refresh token or a personal access token. Formats differ by service.
- Categories
- Secrets and credentials (passwords, keys, tokens)
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Microsoft Purview
Microsoft Entra client access token,Azure AD client access token,Azure Databricks personal access token,Azure DevOps personal access token,All Credential Types,All credentials- Quality
- 55/100 · missing: regexp, examples, negative example, translation
- Metacrafter rules
- no detection rule yet
- Supported by tools
- Microsoft Purview Data Loss Prevention, Nightfall AI
Child datatypes
| ID | Name | Categories | Countries | Description |
|---|---|---|---|---|
| atlassian_api_token | Atlassian API token draft | secrets | global | API token of an Atlassian account (Jira, Confluence and other Atlassian cloud products). Current tokens start with ATATT3; secret... |
| databricks_access_token | Databricks personal access token draft | secrets | global | Personal access token of Databricks, used to authenticate to a Databricks workspace. It starts with dapi followed by 32 hexadecimal... |
| digitalocean_token | DigitalOcean API token draft | secrets | global | API token of DigitalOcean. The prefix tells the token type: dop_v1_ for a personal access token, doo_v1_ for an OAuth access token and... |
| doppler_token | Doppler token draft | secrets | global | Access token of the Doppler secrets manager. Doppler documents one format per token type, each starting with dp. and a type code: dp.pt.... |
| dynatrace_token | Dynatrace token draft | secrets | global | Access token of Dynatrace in the format used since Dynatrace version 1.210: a prefix that names the token type (dt0 followed by a letter... |
| facebook_app_access_token | Facebook app access token draft | secrets | global | App access token of the Meta (Facebook) Graph API written as the app ID, a vertical bar and the app secret. Meta allows this form in... |
| gitlab_pat | GitLab personal access token draft | secrets | global | Personal access token of GitLab, which authenticates a user to the GitLab API and to Git over HTTPS. GitLab gives these tokens the... |
| grafana_service_account_token | Grafana service account token draft | secrets | global | Token of a Grafana service account, sent as a bearer token to the Grafana HTTP API: glsa_ followed by 32 letters and digits, an... |
| hashicorp_vault_token | HashiCorp Vault token draft | secrets | global | Token that authenticates a client to HashiCorp Vault. Since Vault 1.10 the prefix names the token type - hvs. for service tokens, hvb.... |
| heroku_oauth_token | Heroku API OAuth access token draft | secrets | global | OAuth access token of the Heroku Platform API, which the Heroku CLI also uses. Tokens granted from April 2024 start with HRKU-: until... |
| huggingface_access_token | Hugging Face access token draft | secrets | global | User access token of the Hugging Face Hub, used in place of a password for git, as a bearer token for Inference Providers and in the... |
| jfrog_reference_token | JFrog reference token draft | secrets | global | Short token of the JFrog Platform (Artifactory) that refers to a full JWT access token. It has 64 characters: the prefix cmVmd followed... |
| npm_access_token | npm access token draft | secrets | global | Access token of the npm package registry in the format introduced in 2021: the prefix npm_ followed by 36 letters and digits, the last... |
| onepassword_service_account_token | 1Password service account token draft | secrets | global | Token of a 1Password service account. 1Password gives it the prefix ops_ so that code analyzers can find it; the rest is a... |
| planetscale_token | PlanetScale API token draft | secrets | global | Token for the PlanetScale API and CLI: a service token starts with pscale_tkn_ and an OAuth token with pscale_oauth_. Secret scanners... |
| pulumi_access_token | Pulumi access token draft | secrets | global | Access token of Pulumi Cloud (a personal, organization or team token): pul- followed by 40 hexadecimal digits. |
| pypi_token | PyPI API token draft | secrets | global | API token of the Python Package Index, used to upload packages. It is a serialized macaroon with the prefix pypi-; PyPI documents that... |
| sentry_auth_token | Sentry auth token draft | secrets | global | Auth token of Sentry, the error monitoring service. Personal (user) tokens are sntryu_ followed by 64 hexadecimal digits. Organization... |
| shopify_access_token | Shopify access token draft | secrets | global | Access token of a Shopify app. The prefix tells the kind of token: shpat_ for an app access token, shpca_ for a custom app and shppa_... |
| sonarqube_token | SonarQube token draft | secrets | global | Token of SonarQube Server used to run an analysis or call the web API instead of a login and password. Current tokens start with one of... |
| square_access_token | Square access token draft | secrets | global | Personal or OAuth access token of the Square APIs. Square does not document the format; secret scanners such as gitleaks recognize it by... |
| terraform_cloud_api_token | HashiCorp Terraform Cloud API token draft | secrets | global | User or organization API token of HashiCorp Terraform Cloud: 14 letters and digits, the marker .atlasv1. and 60 to 70 more letters,... |
Sources
- doc: https://learn.microsoft.com/en-us/purview/sit-defn-azure-ad-client-access-token
- wikipedia: https://en.wikipedia.org/wiki/Access_token
Use this record
- Page URL:
http://registry.apicrafter.io/datatype/access_token - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/secrets/access_token.yamlon GitHub