Command Reference

brainbase token

Issue and manage long-lived personal access tokens (PATs) for CI and unattended scripts. Tokens are prefixed bbpat_…. See Authentication for how they're resolved.

brainbase token create

Issue a long-lived CLI key. Set the result as BRAINBASE_TOKEN to authenticate without brainbase login.

bash

brainbase token create --scope publish

Flag	Description
`--name <label>`	Token label (alias `-n`).
`--scopes <list>`	Comma-separated scopes. Allowed: `read`, `publish`, `admin`. Default `read,publish`. `--scope` is accepted as an alias.

brainbase token list

Show your active tokens.

bash

brainbase token list

brainbase token revoke <id>

Revoke a token by id.

bash

brainbase token revoke <token-id>

Flag	Description
`--yes`, `-y`	Confirm the revoke without a prompt.

--yes is required in CI and pipes

Revoking is irreversible, so with no interactive terminal the command refuses and names the flag instead of going ahead. Add --yes to any unattended token revoke — see Destructive commands.

brainbase token clear

Forget the locally stored PAT without revoking it server-side (use revoke <id> to revoke).

bash

brainbase token clear