project token -> id, support write/read keys