Personal Access Tokens

Tabnine supports Personal Access Tokens (PATs) for non-interactive authentication for APIs, scripts and integrations that call Tabnine services.

Generating a PAT

In the Admin Console, go to Settings on the lefthand-side menu and select Access Tokens.

Click Generate Token.

Next, type in the name or purpose of the token, then select an expiration date option from the dropdown menu.

Copy the token value and store it securely. Tabnine will not display it again. Then press Close.

Using a PAT in API calls

Include the PAT as a bearer token in the Authorization header of your HTTP requests.

Example: cURL

#cURL example

curl -X GET "https://<tabnine-server>/api/v1/health" \
  -H "Authorization: Bearer <TABNINE_PAT>" \
  -H "Content-Type: application/json"

Example: Node.js

import fetch from "node-fetch";
const TABNINE_PAT = process.env.TABNINE_PAT;
const res = await fetch("https://<tabnine-server>/api/v1/health", {
  headers: {
    Authorization: `Bearer ${TABNINE_PAT}`,
    "Content-Type": "application/json",
  },
});

Use the same pattern for any internal Tabnine API endpoint (admin automation, reporting, or integration scripts).

Access Token List

A list of all active tokens will display on the Access Tokens page, noting:

• Status

• Creation Date

• Expiration Date

• The last time it was used (including noting if it is still “Never Used”)

Revoking Tokens

In the final column on the same list, you have the option to revoke the token’s access by pressing Revoke. This will also eliminate it from the list of tokens.