Create tokens with REST API / CLI

In the end the API tokens qualify as an actual content type, though I don’t believe it has the regular crud operations exposed