Application tokens are bearer credentials scoped to one application. Create them under Application settings.
Choose a preset
Never embed a Server send or Full access token in a mobile app. Anyone who extracts it could send notifications.
Create and store a token
Name the integration
Use a name such as Production iOS or Order service.
Choose the narrowest preset
The preset determines the token’s API abilities.
Copy the secret
Pushctl displays the token value only once. Store server tokens in a secret manager and client tokens in the app’s build configuration.
Rotate or revoke
Create a replacement, update the integration, verify it, then delete the old token. Deletion takes effect immediately. The token list shows its name, abilities, creation time, and last-used time, but never reveals the secret again. 
