summercms/.planning/todos/pending/backend-admin-api-tokens.md

title, date, priority, area

title	date	priority	area
Backend admin personal API tokens (deferred Apparatus PersonalApiToken)	2026-09-28	low	summercms.go admin auth

Apparatus provides personal API tokens for backend admins (PersonalApiToken model, TokenAuthenticate + ForceJsonResponse middleware, token create/revoke on the backend user form). Nothing in Płytarium calls it, so it is deferred past v1. The Phase 9 backend guard already accepts Authorization: Bearer for CLI and tests.

Revisit when a Golem15 project needs scripted access to the admin API. See .planning/notes/apparatus-dissolved-into-framework.md.