Personal tokens

Automate administrator-owned work without copying a dashboard cookie into scripts or CI.

Create and use

Open Integrations → Credentials, choose Personal token, name the task and grant only the required scopes. Copy the secret once.

export TRESTLE_TOKEN='trestle_...'
curl "$TRESTLE_URL/api/v1/collections/issues/records" \
  -H "Authorization: Bearer $TRESTLE_TOKEN"

Good uses

• One-off imports and verified maintenance scripts.
• Local operator tooling.
• Short-lived CI tasks owned by a named administrator.

Prefer a service account when

The credential belongs to a deployed workload, team-owned integration or long-lived production service. Personal tokens should have a clear human owner and be revoked when the task ends or that owner no longer needs access.