An API token is needed to interact with our APIs. API tokens have no expiration date but can be revoked at any time.
Comma- or newline-separated action patterns (e.g. @ossy/booking/actions/*). Leave empty for full access.