streams.write and apm.deploy, never expires, and has the token_kind default_intake. The call requires api_tokens.manage.
curl http://localhost:5080/api/v1/auth/tokens/default \
-H "authorization: Bearer $MS_JWT"
{
"id": "3JtzUbBKtQCD7mFELKp2zDRum9f",
"prefix": "QAi4CAoAAqY5izlY",
"token": "ms_QAi4CAoAAqY5izlY_<secret>",
"role_id": "<intake-role-id>",
"role_key": "intake",
"role_name": "Intake token",
"token_kind": "default_intake",
"application_id": null,
"service_account_id": null,
"expires_at_micros": null,
"created_at_micros": 1790000000000000
}
Authentication
Default intake token
Get or create the default token that senders use to write telemetry.
curl http://localhost:5080/api/v1/auth/tokens/default \
-H "authorization: Bearer $MS_JWT"
{
"id": "3JtzUbBKtQCD7mFELKp2zDRum9f",
"prefix": "QAi4CAoAAqY5izlY",
"token": "ms_QAi4CAoAAqY5izlY_<secret>",
"role_id": "<intake-role-id>",
"role_key": "intake",
"role_name": "Intake token",
"token_kind": "default_intake",
"application_id": null,
"service_account_id": null,
"expires_at_micros": null,
"created_at_micros": 1790000000000000
}
Last modified on October 26, 2026