Personal Access Tokens

Personal Access Tokens authenticate Agent Gateway requests with your My Relewise user identity.

Use a Personal Access Token instead of sharing API Keys with AI assistants, automation tools, or external apps.

Create a Token

In My Relewise, open User > Personal Access Tokens. You can also select Manage Your Tokens from the Agent Gateway page.

When you create a token, My Relewise shows the token value once. Store it immediately in the connected tool or secret store. You cannot retrieve the same token value later.

Expiration

A token can have an expiration date. After it expires, Agent Gateway rejects requests that use it.

Expired tokens remain visible so you can audit what existed, but they cannot be used for new requests.

Regenerate a Token

Regenerating a token, also called rotating it, creates a new token value for the same Personal Access Token record.

Use regeneration when a token value is lost or may have been exposed. After regeneration, update the connected tool with the new value. The old value stops working.

Revoke a Token

Revoking a token disables it permanently. Use revoke when the token is no longer needed or should no longer be trusted.

Revoked tokens remain visible in My Relewise for audit history.

Dataset Access

Dataset access controls which Datasets the token can be used with.

Dataset Access	What It Means
No Datasets	Blocks the token from all Datasets.
All Datasets	Allows every Dataset your user can access.
Selected Datasets	Allows only the Datasets selected in My Relewise.

Dataset access does not override the Dataset Access Policy or your user permissions. Agent Gateway still checks those gates for every request.

Last Used

My Relewise records when a token was last used. Use this value to identify unused tokens and decide whether they should be revoked.