Skip to content

Exchange an Automation Secret

Exchange an automation secret for an access token.

Best for Automation developer and Workspace manager Updated April 3, 2026
CLI In this interface
4 steps Steps
2 interfaces Available in
Use this path when

Use the CLI exchange command after loading an automation secret into the active profile.

What you'll finish here
  • Use the right credential in the right place.
  • Mint a short-lived access token safely.
  • Know when to repeat the exchange.

Where this happens

LabelValueNotes
Command./backlog.sh auth set-token blg_auto_xxxStores the automation secret.
Command./backlog.sh auth exchange [--save]Exchanges the secret for a short-lived access token.

Same Task, Other Interfaces

Use the version that matches where you are working now. The subject matter stays the same; the delivery changes by surface.

Keep this boundary clear

  • The long-lived automation secret is not the token you should keep reusing on normal resource endpoints.

Do the work

  1. 1. Store the automation secret with `./backlog.sh auth set-token blg_auto_xxx`.
  2. 2. Run `./backlog.sh auth exchange --save` if you want the CLI to persist the exchanged access token.
  3. 3. Read the returned access token metadata and expiry.
  4. 4. Run resource commands after the exchange so they use the short-lived access token instead of the long-lived secret.

Keep Going in Automation and Agents

Stay in the same interface and move to the next closest task in this topic when needed.

Nearby Guides

These guides stay close to the current workflow so you can keep moving without restarting discovery.