truefoundry-access-tokens

TrueFoundry personal access tokens are credentials used for API authentication and CI/CD workflows. They allow automated pipelines to securely interact with your TrueFoundry environment, reducing manual token handling risks by providing auditable access.

To create a new personal access token, you run the token creation workflow after passing preflight checks. The system generates the PAT for your deployment pipeline and enforces a single-use token reveal so the value is never repeatedly printed.

The best way to rotate secure credentials is to delete existing tokens to revoke access and create new ones. This workflow supports safe credential rotation by operating via a REST API wrapper or CLI to enforce auditable token management.

Yes, you need both the TFY_API_KEY and TFY_BASE_URL configured to list active API authentication tokens. The skill performs preflight checks to ensure these environment variables are present before attempting to list or manage your tokens.

Token management masks personal access token values during display to enforce built-in security safeguards. By ensuring a single-use token reveal and masking values afterward, the system prevents sensitive credentials from being exposed in logs or terminal output.