Agent Tokens (PAT)

Generate named API tokens for AI agents, scripts, and integrations.

What Are Agent Tokens?

Personal Access Tokens (PATs) let agents and automations interact with your Grove queue without your password. Each token is named, auditable, and revocable.

Token format: `grv_live_` + 64 hex characters

Generate a Token

1. Go to `app.grovereader.com` → **Settings → Tokens**

2. Click **New Token**

3. Give it a descriptive label (e.g. `Claude Agent`, `Obsidian Plugin`, `Cursor`)

4. Copy the token immediately — it won't be shown again

Use a Token

Pass the token as a Bearer token in the `Authorization` header:

Authorization: Bearer grv_live_...

Revoke a Token

Go to Settings → Tokens and click **Revoke** next to the token. It's invalidated immediately — no restart needed.

Best Practices

- **One token per integration** — makes it easy to revoke just one if needed

- **Never commit tokens to git** — use environment variables

- **Label tokens clearly** so you know what to revoke