The worker token
The node needs a key to talk to the backend, like any other program. Its key is a personal API token whose scope is ai-processing:worker, and the backend's worker middleware lets a request through only when it carries that scope. An application token or a persona acting token is refused. The token is minted with a tool that ships with the backend, and its value is shown once.
That scope is enough to take jobs, and no more. It does not let the node read your data. When a job needs the node to act as the job's owner, say to read the document it is tagging, the backend mints a separate acting token for that job, good for exactly as long as the lease. So the node never holds more authority than the job it is working, or holds it for longer than it holds the job.
- APIs & protocols
- REST