REST API: access tokens
Access tokens
Manage the permanent API tokens you use for server-to-server calls.
A permanent API token authorizes server-to-server calls. You can create and manage tokens in the dashboard, or with the operations below. These operations are called with a user token in the token header or with an existing permanent API token in the body. See authentication.
| Operation | Endpoint | What it does |
|---|---|---|
| List tokens | tokens | Read every permanent API token with its expiry. |
| Create token | token/create | Create a token, with or without an expiry. |
| Update token | token/update | Change the expiry of a token, or set it to never. |
| Delete token | token/delete | Revoke a token. |
Keep every token on your server. Never put one in browser code, a mobile app or a repository. The dashboard side of the same task is described in the platform user guide.