QSTH-943: Read-only token for QStash and Workflow

docs.json

@@ -1173,6 +1173,7 @@
                   "qstash/howto/multi-region",
                   "qstash/howto/local-development",
                   "qstash/howto/local-tunnel",
+                  "qstash/howto/readonly-token",
                   "qstash/howto/redact-fields",
                   "qstash/howto/signature",
                   "qstash/howto/delete-schedule",
@@ -1357,6 +1358,7 @@
                   "workflow/howto/configure",
                   "workflow/howto/cancel",
                   "workflow/howto/security",
+                  "workflow/howto/readonly-token",
                   "workflow/howto/redact-fields",
                   "workflow/howto/changes",
                   "workflow/howto/schedule",

llms-full.txt

@@ -9625,6 +9625,22 @@ QStash supports a number of optional parameters and configuration that you can
 use to customize the delivery of your message. All configuration is done using
 HTTP headers.
 
+# Read-only Token
+Source: https://upstash.com/docs/qstash/howto/readonly-token
+
+You can use a read-only version of your token to safely share it with your team or AI agents.
+This token has access to your logs, messages, schedules, and other resources, but it cannot be used to publish messages, create new resources such as schedules or URL Groups, or modify existing resources.
+
+You can get your read-only token from the dashboard by clicking "Read-only token" in the Quickstart section:
+
+  <img />
+
+<Info>
+Note that a read-only token can still access sensitive data such as logs and messages.
+
+If you want to share your token without exposing sensitive data, you can use the ["Redact Fields"](/docs/qstash/howto/redact-fields) feature to hide sensitive data from the logs and resources.
+</Info>
+
 # Receiving Messages
 Source: https://upstash.com/docs/qstash/howto/receiving
 
@@ -47098,6 +47114,22 @@ After running your workflow, your dashboard shows each step in detail:
 
   <img />
 
+# Read-only Token
+Source: https://upstash.com/docs/workflow/howto/readonly-token
+
+You can use a read-only version of your token to safely share it with your team or AI agents.
+This token has access to your logs, messages, schedules, and other resources, but it cannot be used to publish messages, create new resources such as schedules or URL Groups, or modify existing resources.
+
+You can get your read-only token from the dashboard by clicking "Read-only token" in the Quickstart section:
+
+  <img />
+
+<Info>
+Note that a read-only token can still access sensitive data such as logs and messages.
+
+If you want to share your token without exposing sensitive data, you can use the ["Redact Fields"](/docs/workflow/howto/redact-fields) feature to hide sensitive data from the logs and resources.
+</Info>
+
 # Realtime Quickstart
 Source: https://upstash.com/docs/workflow/howto/realtime/basic
 

llms.txt

@@ -199,6 +199,7 @@
 - [Local Tunnel](https://upstash.com/docs/qstash/howto/local-tunnel.md)
 - [Select a Region](https://upstash.com/docs/qstash/howto/multi-region.md)
 - [Publish Messages](https://upstash.com/docs/qstash/howto/publishing.md)
+- [Read-only Token](https://upstash.com/docs/qstash/howto/readonly-token.md)
 - [Receiving Messages](https://upstash.com/docs/qstash/howto/receiving.md): What do we send to your API?
 - [Redact Private Data](https://upstash.com/docs/qstash/howto/redact-fields.md): How to redact private data in your messages
 - [Reset Token](https://upstash.com/docs/qstash/howto/reset-token.md)
@@ -1039,6 +1040,7 @@
 - [Migration Guide](https://upstash.com/docs/workflow/howto/migrations.md)
 - [Select a Region](https://upstash.com/docs/workflow/howto/multi-region.md)
 - [Parallel Runs](https://upstash.com/docs/workflow/howto/parallel-runs.md)
+- [Read-only Token](https://upstash.com/docs/workflow/howto/readonly-token.md)
 - [Realtime Quickstart](https://upstash.com/docs/workflow/howto/realtime/basic.md)
 - [Human-in-the-Loop](https://upstash.com/docs/workflow/howto/realtime/human-in-the-loop.md)
 - [Redact Private Data](https://upstash.com/docs/workflow/howto/redact-fields.md): How to redact private data in your workflow runs

qstash/howto/readonly-token.mdx

@@ -0,0 +1,18 @@
+---
+title: "Read-only Token"
+---
+
+You can use a read-only version of your token to safely share it with your team or AI agents.
+This token has access to your logs, messages, schedules, and other resources, but it cannot be used to publish messages, create new resources such as schedules or URL Groups, or modify existing resources.
+
+You can get your read-only token from the dashboard by clicking "Read-only token" in the Quickstart section:
+
+<Frame>
+  <img src="/img/qstash/readonly-token.png" />
+</Frame>
+
+<Info>
+Note that a read-only token can still access sensitive data such as logs and messages.
+
+If you want to share your token without exposing sensitive data, you can use the ["Redact Fields"](/qstash/howto/redact-fields) feature to hide sensitive data from the logs and resources.
+</Info>

workflow/howto/readonly-token.mdx

@@ -0,0 +1,18 @@
+---
+title: "Read-only Token"
+---
+
+You can use a read-only version of your token to safely share it with your team or AI agents.
+This token has access to your logs, messages, schedules, and other resources, but it cannot be used to publish messages, create new resources such as schedules or URL Groups, or modify existing resources.
+
+You can get your read-only token from the dashboard by clicking "Read-only token" in the Quickstart section:
+
+<Frame>
+  <img src="/img/qstash/readonly-token.png" />
+</Frame>
+
+<Info>
+Note that a read-only token can still access sensitive data such as logs and messages.
+
+If you want to share your token without exposing sensitive data, you can use the ["Redact Fields"](/workflow/howto/redact-fields) feature to hide sensitive data from the logs and resources.
+</Info>