Poggio Labs

Poggio Labs API Tokens API

Scoped credentials owned by an organization and user.

GitHub OpenAPI

Operations 4

GET /v1/api-tokens List API tokens #
POST /v1/api-tokens Create an API token #
GET /v1/api-token-scopes List API token scopes #
DELETE /v1/api-tokens/{tokenId} Revoke an API token #

Documentation

📖
Documentation
https://docs.gkeeper.ai/
📖
APIReference
https://docs.gkeeper.ai/docs/api/rest-api
📖
GettingStarted
https://docs.gkeeper.ai/docs/getting-started

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/poggio-labs/refs/heads/main/openapi/poggio-labs-api-tokens-api-openapi.yml

Other Resources

🔗
SourceCode
https://github.com/poggiolabs/goalkeeper
🔗
OAuthScopes
https://raw.githubusercontent.com/api-evangelist/poggio-labs/refs/heads/main/scopes/poggio-labs-goalkeeper-scopes.yml
🔗
Conventions
https://raw.githubusercontent.com/api-evangelist/poggio-labs/refs/heads/main/conventions/poggio-labs-goalkeeper-conventions.yml
🔗
Idempotency
https://raw.githubusercontent.com/api-evangelist/poggio-labs/refs/heads/main/conventions/poggio-labs-goalkeeper-conventions.yml
🔗
ErrorCatalog
https://raw.githubusercontent.com/api-evangelist/poggio-labs/refs/heads/main/errors/poggio-labs-goalkeeper-problem-types.yml
🔗
DataModel
https://raw.githubusercontent.com/api-evangelist/poggio-labs/refs/heads/main/data-model/poggio-labs-goalkeeper-data-model.yml
🔗
Lifecycle
https://raw.githubusercontent.com/api-evangelist/poggio-labs/refs/heads/main/lifecycle/poggio-labs-goalkeeper-lifecycle.yml
🔗
ChangeLog
https://raw.githubusercontent.com/api-evangelist/poggio-labs/refs/heads/main/changelog/poggio-labs-goalkeeper-changelog.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/poggio-labs-api-tokens-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

poggio-labs-api-tokens-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Goalkeeper API Tokens API
  version: 0.0.0
  description: Public REST API.
servers:
- url: http://localhost:3001
  description: Local development
tags:
- name: API Tokens
  description: Scoped credentials owned by an organization and user.
paths:
  /v1/api-tokens:
    get:
      operationId: listApiTokens
      summary: List API tokens
      description: Lists active, unexpired API tokens for the current user and active organization.
      tags:
      - API Tokens
      responses:
        '200':
          description: Active API tokens.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ListApiTokensResponse'
        '401':
          description: The request is not authenticated.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
    post:
      operationId: createApiToken
      summary: Create an API token
      description: Creates a scoped API token in the active organization and returns its secret once.
      tags:
      - API Tokens
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateApiTokenRequest'
      responses:
        '201':
          description: The token and its one-time secret.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CreateApiTokenResponse'
        '400':
          description: The token request is invalid.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: The request is not authenticated.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: The request origin is not allowed.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
  /v1/api-token-scopes:
    get:
      operationId: listApiTokenScopes
      summary: List API token scopes
      description: Returns the canonical API token scope registry.
      tags:
      - API Tokens
      responses:
        '200':
          description: Available API token scopes and defaults.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ListApiTokenScopesResponse'
  /v1/api-tokens/{tokenId}:
    delete:
      operationId: revokeApiToken
      summary: Revoke an API token
      description: Immediately revokes one of the current user's API tokens in the active organization.
      tags:
      - API Tokens
      parameters:
      - name: tokenId
        in: path
        required: true
        description: API token identifier.
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: The revoked API token.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RevokeApiTokenResponse'
        '401':
          description: The request is not authenticated.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: The request origin is not allowed.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: The API token does not exist for the current user and active organization.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
components:
  schemas:
    ApiTokenScopeDefinition:
      type: object
      additionalProperties: false
      required:
      - id
      - label
      - description
      - default
      properties:
        id:
          $ref: '#/components/schemas/ApiTokenScope'
        label:
          type: string
        description:
          type: string
        default:
          type: boolean
    CreateApiTokenResponse:
      type: object
      additionalProperties: false
      required:
      - token
      - secret
      properties:
        token:
          $ref: '#/components/schemas/ApiToken'
        secret:
          type: string
    ListApiTokenScopesResponse:
      type: object
      additionalProperties: false
      required:
      - scopes
      properties:
        scopes:
          type: array
          items:
            $ref: '#/components/schemas/ApiTokenScopeDefinition'
    ApiTokenScope:
      type: string
      enum:
      - goals:read
      - goals:write
      - goals:read:all
      - goals:write:all
      - labels:read
      - labels:write
    RevokeApiTokenResponse:
      type: object
      additionalProperties: false
      required:
      - token
      properties:
        token:
          $ref: '#/components/schemas/ApiToken'
    CreateApiTokenRequest:
      type: object
      additionalProperties: false
      required:
      - name
      - scopes
      properties:
        name:
          type: string
          minLength: 1
          maxLength: 100
        scopes:
          type: array
          minItems: 1
          uniqueItems: true
          items:
            $ref: '#/components/schemas/ApiTokenScope'
        expiresInDays:
          type: integer
          minimum: 1
          maximum: 365
          default: 90
    Error:
      type: object
      additionalProperties: false
      required:
      - error
      properties:
        error:
          type: string
        message:
          type: string
    ListApiTokensResponse:
      type: object
      additionalProperties: false
      required:
      - tokens
      properties:
        tokens:
          type: array
          items:
            $ref: '#/components/schemas/ApiToken'
    ApiToken:
      type: object
      additionalProperties: false
      required:
      - id
      - name
      - prefix
      - scopes
      - expiresAt
      - lastUsedAt
      - revokedAt
      - createdAt
      properties:
        id:
          type: string
          format: uuid
        name:
          type: string
          minLength: 1
          maxLength: 100
        prefix:
          type: string
        scopes:
          type: array
          minItems: 1
          uniqueItems: true
          items:
            $ref: '#/components/schemas/ApiTokenScope'
        expiresAt:
          type: string
          format: date-time
        lastUsedAt:
          anyOf:
          - type: string
            format: date-time
          - type: 'null'
        revokedAt:
          anyOf:
          - type: string
            format: date-time
          - type: 'null'
        createdAt:
          type: string
          format: date-time
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: A Goalkeeper API token or provider-issued OAuth access token.
    cookieAuth:
      type: apiKey
      in: cookie
      name: goalkeeper_session