Skip to Content
splashify CLIAccess Tokens

Access Tokens

A personal access token (oc_live_…) is a long-lived credential that lets the splashify CLI act on your Splashify Pro account. The Splashify OpenClaw skill uses the same token, since it runs the CLI under the hood — connect once, and both work.

What a token can do

  • It works as an alternative to your normal login on every app action — messaging, contacts, broadcasts, templates, analytics, and more.
  • It always acts as you (the account owner), scoped to your account.
  • It never grants admin or reseller access.

Treat a token like a password.

Create a token — in the app

  1. Open Settings → Developer → Access Tokens & OpenClaw.
  2. Click New Token.
  3. Enter a name (e.g. “OpenClaw on my laptop” or “Server automation”).
  4. Optionally set Expires in (days) — 0 means it never expires.
  5. Click Create Token and copy the value immediately.

The full token is shown once. Only a short prefix (oc_live_……) is stored for display afterwards — you cannot retrieve the full value again.

Create a token — from the CLI

Once the CLI is connected, you can mint more tokens without the app:

splashify token create --name "Server automation"
splashify token create --name "Temp token" --expires-days 30

List your tokens

In the app: the Access Tokens panel lists each token with its name, prefix, creation date, and last-used time.

From the CLI:

splashify token list
ID                                    NAME              PREFIX         LAST USED     STATUS
2f1c…                                  OpenClaw laptop   oc_live_a1b2c  May 19, 2026  active

Revoke a token

Revocation is immediate — the moment a token is revoked, the CLI and the OpenClaw skill that depend on it stop working.

In the app: click Revoke next to the token, then confirm.

From the CLI:

splashify token revoke <id>

Security best practices

  • Create a separate token per device or integration, so you can revoke one without affecting others.
  • Set an expiry for short-lived or experimental use.
  • The CLI stores the token at ~/.splashify/config.json with 0600 permissions — keep that file private.
  • Revoke any token you no longer use.
  • There is a limit of 20 active tokens per account; revoke old ones to create new ones.

Next

AnalyticsGeneric api command