Publishable tokens and the widget

Command	Purpose
vatio tokens list / create [--env NAME] [--label NAME] / revoke PREFIX	Manage publishable tokens; create defaults to live
vatio widget [--env NAME]	Read widget configuration and show the token-creation command for that environment; default live

create prints the full token once. list shows prefixes only, which is also what a revoke takes.

Revoking prevents new chats and conversation lists with that token; chat credentials already issued stay valid until they expire.

widget is read-only — vatio.yml owns every field it reports, so a push is what changes them. See Web widget for the fields themselves.

Never use a developer token (vat_…) in a browser. Publishable tokens are the ones meant for page source, and the origin allowlist is what scopes them.