API reference

Tokens

Mint, list and revoke workspace tokens.

Workspace tokens (cpw_...) are read-only and see one workspace (scopes). Tenant tokens are issued by the BreezeIQ team, not through the API.

Create a workspace token#

POST /v1/tenants/{tenant}/workspaces/{ws}/tokens Tenant token

Mints a read-only workspace token, for a dashboard or app. No body.

bash

curl -X POST "https://api.breeze.in/cdp/control-plane/v1/tenants/breeze/workspaces/my-store/tokens" \
  -H "Authorization: Bearer $BREEZEIQ_TOKEN"

json

{
  "token": "cpw_dad43ab7f2a5.9c1f…",
  "token_id": "cpw_dad43ab7f2a5",
  "tenant_id": "breeze",
  "workspace_id": "my-store",
  "note": "store this token now — it is not retrievable again"
}

The token is shown once

Store token as soon as you receive it. It can't be retrieved again.

List tokens#

GET /v1/tenants/{tenant}/tokens Tenant token

Lists tokens, never their secrets. workspace_id: null marks a tenant token.

bash

curl "https://api.breeze.in/cdp/control-plane/v1/tenants/breeze/tokens" \
  -H "Authorization: Bearer $BREEZEIQ_TOKEN"

json

{
  "tokens": [
    {
      "token_id": "cpw_dad43ab7f2a5",
      "workspace_id": "my-store",
      "status": "active"
    }
  ]
}

Revoke a token#

DELETE /v1/tenants/{tenant}/tokens/{token_id} Tenant token

Revokes a token immediately.

bash

curl -X DELETE "https://api.breeze.in/cdp/control-plane/v1/tenants/breeze/tokens/cpw_dad43ab7f2a5" \
  -H "Authorization: Bearer $BREEZEIQ_TOKEN"

json

{
  "status": "revoked",
  "token_id": "…"
}