Personal Access Tokens

You can generate a personal access token (PAT) in Konnect for authentication with decK commands. This is more secure than basic authentication, and can be useful for organizations with CI pipelines that can’t use the standard username and password authentication.

There are two types of PATs available for Konnect:

Personal access tokens associated with user accounts
System account access tokens associated with system accounts

Learn more about system accounts in the Konnect System Accounts documentation.

Before you generate a PAT, keep the following in mind:

A PAT is granted all of the permissions that the user has access to via their most up-to-date role assignment.
The PAT has a maximum duration of 12 months.
There is a limit of 10 personal access tokens per user.
Unused tokens are deleted and revoked after 12 months of inactivity.

User Account Token

System Account Token

To generate a PAT for a user account in Konnect, select your user icon to open the context menu and click Personal access tokens, then click Generate token.

Create a system account token through the Konnect API.

Important: The access token is only displayed once, so make sure you save it securely.