Admin panel

Bots & API keys

Bot accounts, server bot roles, and scoped personal access tokens.

Admin only

Bot accounts

Created from the Users page like any account, flagged as bots. Bots cannot log in with a password — they authenticate exclusively with an API key. Server-level duties (default bot, welcome bot, auto-moderator) are assigned in Moderation & bots.

API keys

Personal access tokens exist at two levels: every user can issue their own from Preferences, and admins additionally issue keys for bot accounts here:

Scoped — each key carries only the permissions it needs: read/write pairs for profile, messages, conversations, communities, notifications, plus push:write, moderation:write and full admin.
Shown once — the plaintext pat_… token appears only at creation; the server stores a hash. Lose it, issue a new one.
Revocable — delete a key and its access ends immediately.

Use it as a bearer token:

curl -H "Authorization: Bearer pat_..." \
  https://chat.example.com/api/me

See the REST API page for what to call.