Mint scoped bearer tokens to pull the canonical analytics fact into a warehouse or share with a client — revocable at any time.
A token-authenticated export endpoint serves the same canonical daily fact the dashboards are built on, as CSV or JSON. Point a warehouse job at it, schedule a nightly pull, or hand a client a read-only feed — the shape is stable and documented.
Each token is minted with a clear label and a scope: agency-wide across every client, or locked to a single client who should only ever see their own data. The plaintext token is shown exactly once at creation and only its hash is stored, so it can never leak from the dashboard later.
Every token is listed with its label, scope and creation date, and any token can be revoked in one click — instantly cutting off a warehouse job or a former client without disturbing the others.