> ## Documentation Index
> Fetch the complete documentation index at: https://docs.metaphi.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Registry tokens

> Pull your deliveries' images with a short-lived token from your own image repository.

A delivery's images are in your organization's own image repository. They are named `<repository>/<image>@sha256:...`, and each task of a delivery lists the ones it uses.

## Create a registry token

`POST /v1/kennet/registry/token` returns a token that pulls the images of your organization's deliveries for one hour. Ask again once it has expired.

```sh theme={"dark"}
curl -X POST https://api.metaphi.ai/v1/kennet/registry/token -H "Authorization: Bearer $API_KEY"
```

| Field | Type | Description |
| - | - | - |
| `object` | string | `registry_token` |
| `server` | string | The registry's host: what the container client signs in to |
| `username` | string | The user name the client signs in with |
| `token` | string | The password. It pulls from `repository` and nothing else. Keep it out of logs and files |
| `repository` | string | Your organization's image repository |
| `expires_at` | integer | When the token stops working, Unix seconds |

Sign your container client in with it:

```sh theme={"dark"}
echo "$TOKEN" | docker login "$SERVER" --username "$USERNAME" --password-stdin
```

From a terminal, `kennet registry login` does both steps, and `kennet registry token` prints the token. An organization with no image repository yet answers `404 resource_missing`.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.