{#if me}

{me.username}

Email
{me.email ?? 'No email set'}
User ID
{me.id}
{/if} {#if deniedFromUsers} {/if} {#if banner} {/if}

API keys

{#if !mintOpen && !reveal} {/if}
{#if reveal}

Save this token now — it will never be shown again.

Paste it into your CLI config or external integration. PiCloud only ever stores a hash; if you lose it, mint a new one.

{reveal.raw_token}
{/if} {#if mintOpen}
Scopes
{#each ALL_SCOPES as scope (scope)} {@const instanceScope = scopeIsInstance(scope)} {@const disabled = boundToApp && instanceScope} {/each}
{mintForm.scopes.size === 0 ? 'Pick at least one scope.' : `${mintForm.scopes.size} scope${mintForm.scopes.size === 1 ? '' : 's'} selected.`}
{#if mintError}
{mintError}
{/if}
{/if} {#if loadError}
{loadError}
{:else if keys.length === 0 && !reveal && !mintOpen}

No API keys yet. Mint one to authenticate the CLI or external integrations.

{:else if keys.length > 0}
Name
Prefix
Scopes
Binding
Created
Last used
Expires
{#each keys as key (key.id)}
{key.name}
pic_{key.prefix}…
{#each key.scopes as s (s)} {s} {/each}
{appLabel(key.app_id)}
{shortDate(key.created_at)}
{relative(key.last_used_at)}
{key.expires_at ? shortDate(key.expires_at) : 'Never'}
{/each}
{/if}
{#if revokeTarget} (revokeTarget = null)} >

Revoking {revokeTarget.name} ({revokeTarget.prefix}) takes effect immediately. Any CLI or integration using it will start returning 401 on the next request.

This can't be undone — mint a new key if you need one again.

 {/if}