---
id: "airtable_personal_access_token"
kind: "datatype"
status: "draft"
is_pii: false
categories: ["secrets"]
langs: ["common"]
quality: 70
url: "https://registry.apicrafter.io/datatype/airtable_personal_access_token"
---

# Airtable personal access token (`airtable_personal_access_token`)

> **Draft.** Draft records have not been reviewed yet and may be incomplete or wrong; do not treat them as authoritative for legal or compliance decisions.

Personal access token of the Airtable Web API, which replaced the deprecated API keys in February 2024. Airtable does not publish the format; the regexp follows the gitleaks rule: pat, 14 letters and digits, a dot and 64 hexadecimal digits.

- Parent datatype: `access_token`
- Personal data (PII): no
- Categories: Secrets and credentials (passwords, keys, tokens) (secrets)
- Countries: global
- Languages: Common to most languages (common)
- Classification: identifier

## Detection

Regular expression (Python `re`):

```
^pat[A-Za-z0-9]{14}\.[0-9a-f]{64}$
```

## Examples

- `pat` (invalid example) — Prefix without the secret

## Supported by tools

- `datadogsds`
- `githubsecretscanning`
- `gitleaks`

## Sources

- doc: <https://airtable.com/developers/web/api/authentication>
- other: <https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml>

## Quality

Score 70/100. Missing: examples, mapping (Wikidata, Schema.org, ...), translation.

JSON: <https://registry.apicrafter.io/api/v1/datatypes/airtable_personal_access_token.json> · Edit: <https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/secrets/airtable_personal_access_token.yaml>