diff --git a/packages/schemas/alterations/next-1722506508-personal-access-tokens.ts b/packages/schemas/alterations/next-1722506508-personal-access-tokens.ts
new file mode 100644
index 000000000000..fa4fa8bfbf3b
--- /dev/null
+++ b/packages/schemas/alterations/next-1722506508-personal-access-tokens.ts
@@ -0,0 +1,33 @@
+import { sql } from '@silverhand/slonik';
+
+import type { AlterationScript } from '../lib/types/alteration.js';
+
+import { applyTableRls, dropTableRls } from './utils/1704934999-tables.js';
+
+const alteration: AlterationScript = {
+  up: async (pool) => {
+    await pool.query(sql`
+      create table personal_access_tokens (
+        tenant_id varchar(21) not null
+          references tenants (id) on update cascade on delete cascade,
+        user_id varchar(21) not null
+          references users (id) on update cascade on delete cascade,
+        /** The name of the secret. Should be unique within the user. */
+        name varchar(256) not null,
+        value varchar(64) not null,
+        created_at timestamptz not null default now(),
+        expires_at timestamptz,
+        primary key (tenant_id, user_id, name)
+      );
+    `);
+    await applyTableRls(pool, 'personal_access_tokens');
+  },
+  down: async (pool) => {
+    await dropTableRls(pool, 'personal_access_tokens');
+    await pool.query(sql`
+      drop table personal_access_tokens;
+    `);
+  },
+};
+
+export default alteration;
diff --git a/packages/schemas/tables/personal_access_tokens.sql b/packages/schemas/tables/personal_access_tokens.sql
new file mode 100644
index 000000000000..28cb6c49aff0
--- /dev/null
+++ b/packages/schemas/tables/personal_access_tokens.sql
@@ -0,0 +1,14 @@
+/* init_order = 2 */
+
+create table personal_access_tokens (
+  tenant_id varchar(21) not null
+    references tenants (id) on update cascade on delete cascade,
+  user_id varchar(21) not null
+    references users (id) on update cascade on delete cascade,
+  /** The name of the secret. Should be unique within the user. */
+  name varchar(256) not null,
+  value varchar(64) not null,
+  created_at timestamptz not null default now(),
+  expires_at timestamptz,
+  primary key (tenant_id, user_id, name)
+);