GL_AccessToken is a base kind shared by all GitLab API token node types. It is never the primary kind of a node — every token node has a more specific kind as its primary kind (GL_PersonalAccessToken, GL_ProjectAccessToken, or GL_GroupAccessToken) with GL_AccessToken carried as a secondary kind.
This allows generic Cypher queries to match all token types without enumerating each subtype:
MATCH (t:GL_AccessToken) WHERE t.active = true RETURN tAll GL_AccessToken nodes expose a common set of properties regardless of subtype:
| Property Name | Data Type | Description |
|---|---|---|
| name | string | Token name (user-defined label) |
| active | bool | Whether the token is currently active |
| revoked | bool | Whether the token has been explicitly revoked |
| scopes | string[] | API scopes granted to this token |
| created_at | datetime | When the token was created |
| last_used | datetime | When the token was last used |
| expires_at | datetime | Token expiration date (never if no expiration) |
flowchart TD
GL_ProjectVariable[fa:fa-sliders GL_ProjectVariable]
GL_PipelineVariable[fa:fa-sliders GL_PipelineVariable]
Secret[fa:fa-key Secret]
GL_InstanceVariable[fa:fa-sliders GL_InstanceVariable]
GL_AccessToken[fa:fa-key GL_AccessToken]
GL_GroupVariable[fa:fa-sliders GL_GroupVariable]
GL_InstanceVariable -->|GL_IsToken| GL_AccessToken
GL_GroupVariable -->|GL_IsToken| GL_AccessToken
GL_ProjectVariable -->|GL_IsToken| GL_AccessToken
GL_PipelineVariable -->|GL_IsToken| GL_AccessToken
Secret -->|GL_IsToken| GL_AccessToken