APITokenAudit · v1.0 — non-oauth api key inventory
offline · zero telemetry

API Token Audit

88 tokens across PAT, service-account, customer-issued, partner integration, signed-request. Last-used age, scope, rotation cadence, IP allow-list, abuse signals. The companion to ScopeCreep — but for the keys that aren't OAuth tokens.

tokens
0
orphan (no owner)
0
never used >90d
0
over-privileged
0
leaked, not rotated
0
Select a token to inspect its usage profile.