TokenTimer Self-hosted

TokenTimer tracks expirations of any expiring asset (certificates, API keys, secrets, licenses, contracts) and notifies you before and after expiry. Use workspaces (isolated containers for tokens, members, and settings) and sections (labels that group tokens within a workspace) to organize data by team, project, or organization, and roles to control access.

CertOps (certificate operations) adds a managed certificate inventory, scheduled renewals, and execution modes. See Certificates and Certificate automation.

TokenTimer Self-hosted (tokentimer-core) is the edition that runs on your own infrastructure with Docker Compose or Kubernetes (Helm). It has no plan limits or integration quota restrictions, and because it runs inside your network it can monitor internal endpoints and private DNS names.

Version selector

These docs are versioned per tokentimer-core minor release. Use the version dropdown in the navbar to match your deployment.

Install and operate

• Install - Docker Compose or Helm, required environment variables, first login, upgrades.
• Configuration reference - every environment variable (SMTP, Twilio, workers, security).
• Authentication - sessions, 2FA, password policies.
• Monitoring & metrics - Prometheus metrics, ServiceMonitor, suggested alerts.
• Backup & restore - PostgreSQL backup procedures.

Use TokenTimer

• Tokens - the token model, file import, integrations, and endpoint monitoring.
• Alerts & thresholds - thresholds, delivery windows, channels, weekly digest.
• Contact groups & channels - workspace contacts, webhooks, WhatsApp templates.
• Teams, workspaces & RBAC - roles and workspace scoping.
• Audit - event catalog and troubleshooting.

Certificates (CertOps)

• Issue a certificate and Executor API - first issuance, jobs, and machine tokens.
• Enable CertOps, connect an executor, and ACME with cert-manager.

Integrate

• API reference - session and machine-token authentication, endpoints, examples.

Other editions

• TokenTimer Cloud is the hosted service.
• TokenTimer Enterprise is the licensed self-hosted variant: SSO (SAML and OIDC), Harbor-delivered images, expanded auto-sync, and CertOps compliance reporting (feature:certops-compliance).