CLI
API Tokens
Manage API tokens from the CLI
API tokens authenticate SDK and API requests without requiring a Supabase JWT. Tokens start with wh_ and never expire (until revoked).
Create a token
wahooks tokens create TOKEN_NAMECreated API token: my-app
wh_your_api_token_here
Save this token — it won't be shown again.The raw token is shown only once at creation time. WAHooks stores a SHA-256 hash — the original token cannot be retrieved.
List tokens
wahooks tokens listID NAME PREFIX LAST USED CREATED
──────────────────────────────────── ──────────────────── ─────────────── ──────────────────── ────────────────────
ef67dace-c3e2-43df-a5ad-18ba65395eb1 my-app wh_12c6edf... 2026-03-14T04:12:00 2026-03-14T04:12:13
1 token(s)Revoke a token
wahooks tokens revoke TOKEN_IDToken revokedRevoked tokens immediately stop working. Any SDK or API client using the token will get a 401 error.
Aliases
wahooks t list
wahooks t create my-token
wahooks t revoke TOKEN_ID