Skip to main content

​
Overview

This guide walks you through creating an Azure DevOps Personal Access Token (PAT) to enable the Antimetal integration for inspecting repositories, pull requests, work items, pipelines, wikis, and test plans.
Only connect this integration if your team uses Azure DevOps for source control, work items, or pipelines. It is not required for the Azure cloud integration.

Set up in Antimetal

Go to the Azure DevOps integration setup in the Antimetal dashboard.

​
Prerequisites

  • An Azure DevOps organization
  • Permission to create Personal Access Tokens
  • Access to the projects you want Antimetal to inspect

​
Setup

1

Open Personal Access Tokens

In Azure DevOps, click your profile icon (top right) and select User Settings > Personal Access Tokens.
2

Create a new token

  1. Click + New Token
  2. Fill in:
    • Name: Antimetal
    • Organization: the organization you want to connect
    • Expiration: set according to your org’s rotation policy
  3. Under Scopes, select Custom defined
3

Grant read-only scopes

Select Read access only for each of the following scopes. See Microsoft’s Personal Access Tokens guide for full details.
  • Code (Read)
  • Work items (Read)
  • Build (Read)
  • Test Management (Read)
  • Wiki (Read)
  • Project and team (Read)
Do not enable any write, manage, or execute scopes.
4

Create and copy the token

Click Create, then copy the token value.
The token is only shown once. Copy it before leaving the page.
5

Share the token with Antimetal

In the Antimetal UI, paste:
  • Organization URL: https://dev.azure.com/<your-org>
  • Personal Access Token: the token you just created
Click Connect.

​
Permissions and Access

Antimetal uses a read-only PAT scoped to the permissions below. No write operations are performed in your Azure DevOps organization.
ScopeAccess
CodeRead repositories, branches, pull requests, commits, file contents
Work itemsRead work items, queries, iterations
BuildRead build definitions, runs, logs, artifacts
Test ManagementRead test plans, suites, and results
WikiRead wiki pages and search
Project and teamRead project and team metadata
Tokens are stored encrypted. Azure DevOps PATs have a maximum 1-year lifetime — rotate before expiration by creating a new token and updating the credential in Antimetal. Revoke access at any time by deleting the token from User Settings > Personal Access Tokens.