Skip to content

CLI command

tinbox tokens create

Mint a scoped agent token on an inbox (returns plaintext ONCE). Scopes default to the role (viewer→read; agent→read,write; admin→read,write,admin) and act as a ceiling on the grant.

Usage

sh
tinbox tokens create --inbox <inbox> --name <name> --role <role> --ttl <ttl> --scope <scope>

Flags

NameTypeRequiredDefaultDescription
--inboxstringyes—inbox id (ibx_…) or address (support / support@acme.com)
--namestringyes—human label (default: cli-<role>-<date>)
--rolestringyes—viewer | agent | admin (default agent; stored agent = member)
--ttlstringyes—expiry, e.g. 30d, 12h, 45m (units: s m h d w); omit = never expires
--scopestringyes—override coarse scope (repeatable): read | write | admin | *