create_project_token
Mint a PROJECT-scoped management token (er_mcp_) for MCP and REST; it cannot authenticate relay traffic. Use it after create_project to configure a fresh project, or for any project you already own. Attenuated by design: the scopes must be a subset of THIS token's own grant (read is always included), expiry is mandatory (1–90 days, default 30, never "never"), and the minted token — being project-scoped — can never mint tokens itself. spend is human-granted only: no token, of any scope, can mint one carrying it — mint a spend-scoped key from the project's panel instead. Requires an ACCOUNT-scoped token and the config scope. Returns the plaintext exactly once; only its hash is stored.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| slug | Yes | The slug of a project you own. | |
| label | Yes | Human-readable token label (1–100 chars). | |
| scopes | No | Scopes for the minted token — must be a subset of this token's own scopes. `read` is always granted. `spend` and the legacy `billing` scope are never mintable here — panel-only. Default: read + config. | |
| expiresInDays | No | Days until the minted token expires. Default 30. API-minted tokens always expire. |