Kaiten GraphQL API

Create a service account in Service Accounts & Tokens via Integrations → Service Accounts → New Service Account, then generate a token for that service account. Copy the ksh_* token immediately; it is shown only once. You can also create the service account and token through the API using a human JWT as shown in the same doc.

For self-hosted Kaiten, configure an OIDC identity provider as described in Authentication and the self-hosting IdP docs, then sign in through the Kaiten UI to obtain a user JWT. On Kaiten SaaS, user authentication is managed by Kaiten; the docs only describe browser/dashboard use, not a developer token-minting flow for external integrations.