MaGit

Loading console…

MaGit Console

Sign in with your organization SSO to manage repositories and issue scoped access tokens.

Repositories

Metadata repositories in your workspaces. V1 repos are private; access is granted only through scoped tokens.

/

Tokens

Issue scoped MaGit access tokens for people and CI automation, and revoke them the moment they are no longer needed.

CLI sign-in. Generate a token below and it goes straight back to your terminal. You can close this tab afterwards.

You cannot issue tokens

Your account signs in fine but is missing the role magit-token-issuer. Ask an administrator to grant it, then reload this page.

Issue a token

Identity

How you will recognize this token in the list and the audit log.

Attributed to you personally in the audit log.

All optional, recorded for provenance. Leave the three CI fields empty when the holder is an application rather than a pipeline — Purpose is worth filling in either way. Service tokens are scope-limited regardless: no protected environments, no wildcard repositories.

Scope
Repositories
Environments

Selecting a protected environment requires the Admin preset.

A store grant authorizes package objects instead of the repository, so a consumer environment can install from a store without holding rights to the repo it lives in. Read-only unless you tick publishing. Get the id from listStores() or from the output of createGlobalStore.

Permission and lifetime

Can commit and push, but not administer.

Shorter is safer. A token cannot be extended, only reissued.

Your token

shown once
Copy it now. This is the only time it is shown.
  • It cannot be retrieved again. Losing it means issuing a new one.
  • Put it in an environment variable, not in a file you commit. The setup command reads MAGIT_TOKEN.
  • It is scoped and expires per your selection. If it leaks, revoke it below and issue another.
Token 

            
Setup command
              

            
          

        


        

          

            
Issued tokens

            

              
              
            

            
          

          
          

        

      


      

        

          

            
Audit

            
Token lifecycle events for the MaGit app, read from Authix. Authix is the system of record; this console holds no ledger of its own.

          

        

        

          

            
Recent events

            

              
              
            

            
          

          
          

        

      


      

        

          

            
Settings

            
Your identity, the workspaces you can scope a token to, and what is not in V1.

          

        

        
Account

          

        
Workspaces

          

        
Keyboard

          

            

              
Go to view
g then r t a s

              
Filter
/

              
Cancel
Esc

            

          

        
Not in V1

          

            
Public and template repositories, galleries, cloning, forking and publishing flows are on the roadmap (MAGIT-UI-004 / REPO-002). V1 is private-repo-first: every repository here is private and reachable only with a scoped token.