AppTokenResult

Id of the newly created app (same as App._id).

Full JWT for the x-app-token header on public GraphQL and hosted MCP requests. Shown in full once — treat like a password. Later App reads expose only **** + last 4 characters.