Create a volume access token
Exchanges your API key for a short-lived token that authenticates against Baseten volume storage. A volume token is needed only to push and pull volume data; other volume operations use your API key directly. Tokens expire after one hour and cannot be renewed; exchange again for a fresh token. Push and tag capabilities require organization-level model management permission. Pass correlation_id to link the issued token to a client operation in server logs.
Authorizations
Send Authorization: Bearer <api_key>. The legacy Authorization: Api-Key <api_key> scheme is also accepted.
Body
Capabilities the token grants, at least one. Requesting PUSH or TAG requires organization-level model management permission.
1Capability a volume token grants.
PULL: read volume data.INSPECT: read volume metadata without data access.PUSH: upload and commit volume versions.TAG: move or remove tags.
PULL, INSPECT, PUSH, TAG Volume namespaces the token is limited to, lowercase ASCII, at least one. Pass only the namespaces the operation needs.
1Volume names the token is limited to, lowercase ASCII, exact names only, at least one. The limit applies to every requested scope in every requested namespace.
1Optional client-chosen identifier, at most 128 printable ASCII characters. Echoed into server logs to link the issued token to a client operation.
128^[\x21-\x7e]+$Response
Volume access token. Pass as a bearer token to the volume APIs.
Token expiry in ISO 8601 format. Tokens cannot be renewed; exchange again for a fresh token.
Effective capabilities granted.
Capability a volume token grants.
PULL: read volume data.INSPECT: read volume metadata without data access.PUSH: upload and commit volume versions.TAG: move or remove tags.
PULL, INSPECT, PUSH, TAG Effective namespaces granted, in canonical lowercase form.
Effective volume names granted, in canonical lowercase form.
Base URL of the volume API this token authenticates against. Null when the environment does not expose a public volume API yet.