GitLab API Token
This guide explains how to add a GitLab API token to Enji to allow the platform to collect data from GitLab repositories.
Read-only access to GitLab repositories is required for Enji to provide analytics and insights. Depending on the setup, one of the following token types can be used:
- Personal Access Token — tied to a user
- Project Access Token — tied to a specific repository
- Group Access Token — tied to a group and all its projects
These instructions apply to both GitLab Cloud and GitLab Self-Managed.
Personal Access Token (PAT)
Best for: small teams or individual repositories where user-level access is acceptable.
1. Log in to your GitLab account.
2. Go to User Settings → Access Tokens.
For GitLab Cloud: https://gitlab.com/-/profile/personal_access_tokens
For GitLab Self-Managed: https://
3. Fill out the form:
Name: Enji Read Token
Expiration Date: a year or more
Scopes (check all of these):
☑️ read_repository
☑️ read_api
☑️ read_user
☑️ read_registry
☑️ read_package_registry
4. Click Create personal access token
5. Copy and securely store the token — it won't be shown again.
Project Access Token
Best for: giving access to a single repository only.
1. Open the target GitLab project.
2. Go to Settings → Access Tokens.
3. Fill out the form:
Name: Enji Read Token
Role: Reporter
Scopes:
☑️ read_repository
☑️ read_api
☑️ read_registry
☑️ read_package_registry
4. Click Create project access token
5. Copy and securely store the token.
Group Access Token
Best for: giving access to all repositories inside a group.
1. Navigate to your GitLab Group.
2. Go to Settings → Access Tokens.
3. Fill out the form:
Name: Enji Read Token
Role: Reporter
Scopes:
☑️ read_repository
☑️ read_api
☑️ read_registry
☑️ read_package_registry
4. Click Create group access token
5. Copy and securely store the token.
Notes
➡️ You can revoke any token at any time.
➡️ Do not enable write-level scopes (write_repository, api, sudo) — Enji only needs to read data.
➡️ For GitLab Self-Managed, make sure Access Token functionality is enabled in the admin settings.