Tokens are self-served from /token (Cloudflare Access). The boxes below are a manual operator override via ?token=.