Publishable tokens and the widget

Method	Path	Body or result
GET	/publishable_tokens	List active developer-created token prefixes
POST	/publishable_tokens	{ "environment": "live", "label": "website" }; returns the full token once
DELETE	/publishable_tokens/:prefix	Revoke a token
GET	/widget	Widget configuration, origin allowlist, agent availability, and token prefixes

Publishable token environments accept named previews as well as live and preview; omission defaults to live. GET /widget is read-only — vatio.yml owns every field it reports, so a push is what changes them.