Cast AI PAT Token API

openapi: 3.2.0
info:
  title: Organization Management PAT Token API
  version: 0.0.1
  description: Service for managing fine-grained personal access tokens.
servers:
- url: https://api.cast.ai/
  description: US endpoint
- url: https://api.eu.cast.ai/
  description: EU endpoint
security:
- BearerAuth: []
- ApiKeyAuth: []
tags:
- name: PATTokenAPI
  description: Service for managing fine-grained personal access tokens.
paths:
  /organization-management/v1/organizations/{organizationId}/pats:
    post:
      tags:
      - PATTokenAPI
      summary: Create a new Personal Access Token
      description: CreatePAT creates a new Personal Access Token.
      operationId: PATTokenAPI_CreatePAT
      parameters:
      - name: organizationId
        in: path
        description: Organization ID this token will belong to.
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PAT'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PAT'
        default:
          description: Default error response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Status'
    get:
      tags:
      - PATTokenAPI
      summary: List Personal Access Tokens
      description: ListPATs lists Personal Access Tokens for the calling user in a given organization.
      operationId: PATTokenAPI_ListPATs
      parameters:
      - name: organizationId
        in: path
        description: Organization ID to list tokens for.
        required: true
        schema:
          type: string
      - name: page.limit
        in: query
        description: Defines the number of items that should be returned
        schema:
          type: string
      - name: page.cursor
        in: query
        description: "Cursor that defines token indicating where to start the next page.\n Empty value indicates to start from beginning of the dataset."
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ListPATsResponse'
        default:
          description: Default error response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Status'
  /organization-management/v1/organizations/{organizationId}/pats/{id}:
    delete:
      tags:
      - PATTokenAPI
      summary: Delete a Personal Access Token
      description: DeletePAT deletes a Personal Access Token.
      operationId: PATTokenAPI_DeletePAT
      parameters:
      - name: organizationId
        in: path
        description: Organization ID this token belongs to.
        required: true
        schema:
          type: string
      - name: id
        in: path
        description: ID of the PAT to delete.
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content: {}
        default:
          description: Default error response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Status'
    get:
      tags:
      - PATTokenAPI
      summary: Get a Personal Access Token
      description: GetPAT retrieves a single Personal Access Token by ID.
      operationId: PATTokenAPI_GetPAT
      parameters:
      - name: organizationId
        in: path
        description: Organization ID this token belongs to.
        required: true
        schema:
          type: string
      - name: id
        in: path
        description: ID of the PAT to retrieve.
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PAT'
        default:
          description: Default error response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Status'
    patch:
      tags:
      - PATTokenAPI
      summary: Update a Personal Access Token
      description: UpdatePAT updates an existing Personal Access Token.
      operationId: PATTokenAPI_UpdatePAT
      parameters:
      - name: organizationId
        in: path
        description: Organization ID this token belongs to.
        required: true
        schema:
          type: string
      - name: id
        in: path
        description: ID of the PAT to update.
        required: true
        schema:
          type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PAT'
        required: true
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PAT'
        default:
          description: Default error response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Status'
components:
  schemas:
    Status:
      type: object
      properties:
        code:
          type: integer
          description: The status code, which should be an enum value of [google.rpc.Code][google.rpc.Code].
          format: int32
        message:
          type: string
          description: A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the [google.rpc.Status.details][google.rpc.Status.details] field, or localized by the client.
        details:
          type: array
          items:
            $ref: '#/components/schemas/GoogleProtobufAny'
          description: A list of messages that carry the error details.  There is a common set of message types for APIs to use.
      description: 'The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors).'
    ListPATsResponse:
      type: object
      properties:
        pats:
          type: array
          items:
            $ref: '#/components/schemas/PAT'
          description: List of PATs.
      description: ListPATsResponse is the response message for listing PATs.
    PAT:
      required:
      - name
      - organizationId
      - permissionGroups
      type: object
      properties:
        id:
          readOnly: true
          type: string
          description: Unique identifier of the token.
        name:
          type: string
          description: User-provided name of the token.
        organizationId:
          type: string
          description: Organization ID this token belongs to.
        token:
          readOnly: true
          type: string
          description: The actual token value. Only populated on creation (visible once).
        active:
          type: boolean
          description: Whether the token is active.
        permissionGroups:
          type: array
          items:
            type: string
          description: Permission groups associated with this token.
        createTime:
          readOnly: true
          type: string
          description: When the token was created.
          format: date-time
        expireTime:
          type: string
          description: When the token expires (optional).
          format: date-time
        createdBy:
          readOnly: true
          type: string
          description: User ID of the token creator.
        tokenPrefix:
          readOnly: true
          type: string
          description: First 3 characters of the generated token (for display purposes).
      description: PAT represents a Personal Access Token.
    GoogleProtobufAny:
      type: object
      properties:
        '@type':
          type: string
          description: The type of the serialized message.
      additionalProperties: true
      description: Contains an arbitrary serialized message along with a @type that describes the type of the serialized message.
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: JWT
    ApiKeyAuth:
      type: apiKey
      in: header
      name: X-API-Key
x-provenance:
  method: searched
  source: https://docs.cast.ai/reference
  harvested: '2026-10-20'
  tool: harvest-readme-openapi.py
  note: Assembled verbatim from the OpenAPI definition ReadMe embeds in each operation page of the provider's developer portal; paths and components merged by API title, nothing authored.
  assembled_from:
  - https://docs.cast.ai/reference/enterpriseapi_addusertochildorganization.md
  - https://docs.cast.ai/reference/enterpriseapi_batchcreateenterprisegroups.md
  - https://docs.cast.ai/reference/enterpriseapi_batchcreateenterpriserolebindings.md
  - https://docs.cast.ai/reference/enterpriseapi_batchcreateenterpriseserviceaccounts.md
  - https://docs.cast.ai/reference/enterpriseapi_batchdeleteenterprisegroups.md
  - https://docs.cast.ai/reference/enterpriseapi_batchdeleteenterpriserolebindings.md
  - https://docs.cast.ai/reference/enterpriseapi_batchdeleteenterpriseserviceaccounts.md
  - https://docs.cast.ai/reference/enterpriseapi_batchupdateenterprisegroups.md
  - https://docs.cast.ai/reference/enterpriseapi_batchupdateenterpriserolebindings.md
  - https://docs.cast.ai/reference/enterpriseapi_batchupdateenterpriseserviceaccounts.md
  - https://docs.cast.ai/reference/enterpriseapi_createchildorganization.md
  - https://docs.cast.ai/reference/enterpriseapi_deletechildorganization.md
  - https://docs.cast.ai/reference/enterpriseapi_getenterprisegroup.md
  - https://docs.cast.ai/reference/enterpriseapi_getenterprisemember.md
  - https://docs.cast.ai/reference/enterpriseapi_inviteusers.md
  - https://docs.cast.ai/reference/enterpriseapi_listchildrenorganizations.md
  - https://docs.cast.ai/reference/enterpriseapi_listenterpriseserviceaccounts.md
  - https://docs.cast.ai/reference/enterpriseapi_listgroups.md
  - https://docs.cast.ai/reference/enterpriseapi_listmembers.md
  - https://docs.cast.ai/reference/enterpriseapi_listrolebindings.md
  - https://docs.cast.ai/reference/enterpriseapi_overrideuserrolebindings.md
  - https://docs.cast.ai/reference/identityapi_setfingerprint.md
  - https://docs.cast.ai/reference/pattokenapi_createpat.md
  - https://docs.cast.ai/reference/pattokenapi_deletepat.md
  - https://docs.cast.ai/reference/pattokenapi_getpat.md
  - https://docs.cast.ai/reference/pattokenapi_listpats.md
  - https://docs.cast.ai/reference/pattokenapi_updatepat.md
  - https://docs.cast.ai/reference/plgtrialapi_getorganizationtrial.md
  - https://docs.cast.ai/reference/plgtrialapi_marksalescontactedorganizationtrial.md
  - https://docs.cast.ai/reference/plgtrialapi_startorganizationtrial.md
  - https://docs.cast.ai/reference/scimapi_createscimgroup.md
  - https://docs.cast.ai/reference/scimapi_createscimuser.md
  - https://docs.cast.ai/reference/scimapi_deletescimgroup.md
  - https://docs.cast.ai/reference/scimapi_deletescimuser.md
  - https://docs.cast.ai/reference/scimapi_getscimgroup.md
  - https://docs.cast.ai/reference/scimapi_getscimschema.md
  - https://docs.cast.ai/reference/scimapi_getscimuser.md
  - https://docs.cast.ai/reference/scimapi_getserviceproviderconfig.md
  - https://docs.cast.ai/reference/scimapi_listscimgroups.md
  - https://docs.cast.ai/reference/scimapi_listscimresourcetypes.md
  - https://docs.cast.ai/reference/scimapi_listscimschemas.md
  - https://docs.cast.ai/reference/scimapi_listscimusers.md
  - https://docs.cast.ai/reference/scimapi_replacescimgroup.md
  - https://docs.cast.ai/reference/scimapi_replacescimuser.md
  - https://docs.cast.ai/reference/scimapi_updatescimgroup.md
  - https://docs.cast.ai/reference/scimapi_updatescimuser.md
  - https://docs.cast.ai/reference/secretsapi_batchcreatesecretscanningalert.md
  - https://docs.cast.ai/reference/settingsapi_getsettings-1.md
  - https://docs.cast.ai/reference/settingsapi_updatesettings-1.md
  - https://docs.cast.ai/reference/ssoapi_createssosyncconfig.md
  - https://docs.cast.ai/reference/ssoapi_deletessosyncconfig.md
  - https://docs.cast.ai/reference/ssoapi_getssosyncconfig.md
  - https://docs.cast.ai/reference/ssoapi_updatessosyncconfig.md
  merge:
    pages: 53
    deduped: 323
    conflicts_kept_first: 0