Allow org:ci token creation via OAuth access tokens
Open
@BYK is already working on this.
Since Aug 24, 2026.
- Dominant language
- Python
- Stars
- 44.8k
- Forks
- 4.9k
- Avg merge
- 21h 23m
- Merged PRs (30d)
- 607
Description
Enable the API to create org:ci tokens when authenticated with OAuth access tokens from the CLI (sentry token create/list/delete), while continuing to reject personal and org auth tokens for these endpoints.
Background
- CLI need: getsentry/cli#1110 — project setup cannot mint an
org:citoken for sourcemap upload. - Initial scope:
org:cionly (not general personal/org token minting) to unblock the CLI path first.
Scope
- In scope: API support for creating (and related list/delete as needed for CLI)
org:citokens using OAuth access tokens with appropriatetoken:*scopes. - Out of scope: general personal/user token minting via OAuth.
Requested by byk.
--
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.