Authentication
Organization-scoped Sanctum bearer tokens with abilities. Send Authorization: Bearer and optional X-Organization-Id.
Scopes
domains:read/write, certificates:read/write/revoke, webhooks:read/write, integrations:read/write. Missing scopes return 403 with insufficient_scope.
Last used
Sanctum records last_used_at. Revoked keys are deleted and cannot be reused.