# CI/CD & tokens

Create a service token from your org's Tokens page and store it as a CI secret.
Authenticate the Swift CLI with it before publishing in a pipeline:

```bash
swift package-registry login https://registry.perchly.dev --token $PERCHLY_TOKEN
```

Revoke a token immediately from the Tokens page if it's ever exposed — revocation
takes effect on the next request.