Guides

Day-to-day tasks in Settings → Account. Screenshots use a demo workspace; your labels and dates will differ.

API tokens {#api-tokens}

Create a token

  1. Open Account → API tokens.
  2. Label — name the runner (laptop, ci-staging, ci-prod).
  3. Expires — match your rotation policy.
  4. Restrict token to … — on for single-workspace CI; off for cross-workspace tools.
  5. Permissions — start from a preset, then switch to Custom if you need least privilege.
  6. Create token → copy sl_… immediately.
API token create form
CLI / CI preset — typical starting point before customizing.

Choose the right preset

If you need to… Start with…
Run spanline test run and upload results CLI / CI
Build internal dashboards / read-only tooling Read-only
Admin automation across all APIs you can access Full access (use sparingly)
CI that only reads Capture inboxes Custom → Capture read only
Read-only API token preset
Read-only — dashboards and reporting without write scopes.
Full access API token preset
Full access — use sparingly for break-glass automation only.

Custom permissions

Select Custom, then for each row set No access, Read, Read & write, or Full.

Custom permission matrix
Custom — radio matrix per Platform, Performance, and Capture.

After creation

The reveal panel shows the token and example commands. Store the secret in a password manager or CI secret store.

Token reveal
Copy once — Spanline cannot show the secret again.

Manage existing tokens

The list shows Permissions (badges), Workspace restriction, Expires, and Last used.

Token list with badges
Revoke tokens you no longer need — revocation is immediate.

Wire the CLI

spanline auth login --token sl_…
spanline auth workspace use <workspace>

For CI, prefer SPANLINE_TOKEN (and SPANLINE_WORKSPACE when you have multiple workspaces). See Performance → Run tests.

Sessions

Browser sessions represent signed-in browsers.

  1. Open Account → Sessions.
  2. Review IP, user agent, and last seen.
  3. Revoke sessions you do not recognize.

Revoking your current session signs you out. Other devices keep working until their sessions expire or you revoke them.

Security (password & MFA)

  1. Open Account → Security.
  2. Password — change the password used for email sign-in; org policy may enforce length and complexity.
  3. Two-factor authentication — enroll an authenticator app when prompted or when your org requires MFA.

If an organization mandates MFA, you must enroll before using the rest of the workspace.

Preferences

Account → Preferences controls your appearance, locale, and notifications. These override system defaults and do not change workspace or organization settings.