{"registry_version":"2026.1025.387","generated_at":"2026-10-25T06:27:00Z","content_sha256":"089d16f627d9365e3d0663cc8069203706d7cb23a76c332226e29686968811a5","signed":true,"signature":{"key_id":"ed25519:74ca19268e364242","algorithm":"ed25519","expires_at":"2026-11-24T06:27:09Z","expired":false,"manifest":"/registry/manifest.json"},"id":"mapbox/access-tokens","name":"Mapbox account and access tokens","vendor":"Mapbox","status":"researched","last_verified":null,"last_researched":"2026-10-25","summary":"Create a Mapbox account, add a payment method to lift trial limits, and create scoped public (pk) and secret (sk) access tokens, optionally URL-restricted, for maps, search and navigation APIs.","account_model":{"summary":"One Mapbox account (username) owns tokens, usage and billing. Tokens belong to the account and carry scopes.","accounts":[{"name":"Mapbox account","kind":"developer","owned_by":"you or your organisation","required":true,"note":"Card-free sign-up gives a trial account with one token and monthly caps."},{"name":"Payment method on the account","kind":"billing","parent":"Mapbox account","required":false,"note":"Needed for full free tiers, token management (create, rotate, delete) and permanent geocoding."}],"notes":["Mapbox says that without a card on file it cannot verify account ownership, so a card-less account with 2FA enabled cannot be recovered by support."]},"prerequisites":[{"need":"An email address you can verify within 24 hours","note":"The confirmation link sent at sign-up expires after 24 hours."},{"need":"A list of the web origins (domains) that will load your maps, if you plan to URL-restrict tokens"}],"identity_requires":[],"have_ready":[{"kind":"payment_card","description":"A credit or debit card for the Mapbox account","why":"Trial (card-free) accounts cannot create, rotate or delete tokens and have low monthly caps; permanent geocoding needs a card on file.","needed_for":["add-payment-method"],"auto_check":"none","source_url":"https://docs.mapbox.com/accounts/guides/signup/"}],"steps":[{"id":"create-account","title":"Create a Mapbox account","summary":"You sign up on the Mapbox account page, choosing either \"Start without a credit card\" (trial) or adding a card. You accept the terms and press create yourself.","route":"guided","gate":"human_submit","human_only":true,"gate_label":"You press submit","depends_on":[],"optional":false,"url":"https://account.mapbox.com/auth/signup/","lead_time":null,"preflight":[],"captures":null},{"id":"verify-email","title":"Verify your email","summary":"Open the confirmation email from Mapbox and click the link; you then land in the Mapbox Console.","route":"guided","gate":"human_login","human_only":true,"gate_label":"You sign in","depends_on":["create-account"],"optional":false,"url":null,"lead_time":{"official":{"text":"The confirmation link is valid for 24 hours.","source_url":"https://docs.mapbox.com/accounts/guides/signup/","source_title":"Mapbox – Sign up with Mapbox"},"reported":null,"typical_minutes":null},"preflight":[],"captures":null},{"id":"add-payment-method","title":"Add a payment method","summary":"In the Console billing area, you add a card. This removes trial caps, raises rate limits and enables token management. Usage beyond the free tiers is billed monthly. Skip this only for a small prototype.","route":"guided","gate":"human_payment","human_only":true,"gate_label":"You add payment details","depends_on":["verify-email"],"optional":true,"url":null,"lead_time":null,"preflight":[],"captures":null},{"id":"copy-default-public-token","title":"Copy the default public token","summary":"Every account has a default public token with all public scopes. It cannot hold secret scopes or URL restrictions. Fine for local development; create dedicated tokens for production.","route":"copilot","gate":"none","human_only":false,"gate_label":null,"depends_on":["verify-email"],"optional":false,"url":"https://console.mapbox.com/account/access-tokens/","lead_time":null,"preflight":[],"captures":"MAPBOX_ACCESS_TOKEN"},{"id":"create-public-token","title":"Create a URL-restricted public token for production","summary":"Create a new public (pk) token with only the public scopes you need and add your site URLs as restrictions (up to 100, no wildcards or IPs; add localhost explicitly if needed). Mobile SDK apps cannot use URL restrictions.","route":"copilot","gate":"none","human_only":false,"gate_label":null,"depends_on":["add-payment-method"],"optional":true,"url":"https://console.mapbox.com/account/access-tokens/","lead_time":null,"preflight":[],"captures":"MAPBOX_PUBLIC_TOKEN"},{"id":"create-secret-token","title":"Create a secret token for server-side use","summary":"Create a secret (sk) token with only the secret scopes you need (e.g. uploads, or tokens:write to mint tokens via the Tokens API). It is shown only once, so store it in a secrets manager straight away. Use it only from a server.","route":"copilot","gate":"none","human_only":false,"gate_label":null,"depends_on":["add-payment-method"],"optional":true,"url":"https://console.mapbox.com/account/access-tokens/","lead_time":null,"preflight":[],"captures":"MAPBOX_SECRET_TOKEN"}],"gates":[{"step":"create-account","gate":"human_submit","label":"You press submit"},{"step":"verify-email","gate":"human_login","label":"You sign in"},{"step":"add-payment-method","gate":"human_payment","label":"You add payment details"}],"lead_times":[{"step":"verify-email","what":"Verify your email","official":{"text":"The confirmation link is valid for 24 hours.","source_url":"https://docs.mapbox.com/accounts/guides/signup/","source_title":"Mapbox – Sign up with Mapbox"},"reported":null}],"outputs":[{"name":"MAPBOX_ACCESS_TOKEN","description":"Default public token (all public scopes, no URL restrictions)","secret":false,"example_format":"pk.…","environments":["development","test"]},{"name":"MAPBOX_PUBLIC_TOKEN","description":"Dedicated, URL-restricted public token for production web maps","secret":false,"example_format":"pk.…","environments":["staging","production"]},{"name":"MAPBOX_SECRET_TOKEN","description":"Secret token with secret scopes, for server-side calls only","secret":true,"example_format":"sk.…","environments":["development","staging","production"]}],"renewals":[],"estimated_minutes":null,"guide_url":"https://verapli.com/guides/mapbox/access-tokens"}