About API Tokens

This article describes the use of API Tokens, based on OAuth 2.0 authentication protocol, as a means to access our APIs. 

Rules for Using API Tokens

• Tokens will automatically expire and be deleted after 180 days (regardless of whether the token was in use, or not). Once expired and deleted, the token will not be available to the user, and the user account will not have access to our APIs. Therefore, API tokens must be revoked and regenerated, before they expire.
• Only one API token can exist, for any user, at any one time.
• After generating a new API token, insert the new access key generated, into the script in the API. See our API documentation. 
• API tokens are cross-regional (one API token for all regions). The user’s access is determined by his role and the Business Units he belongs to. 
• If you need to disable the API Token option (to limit access by users), contact support. 

Creating an API Token

To create an API token:

1. Sign in to your account              
   (see Signing In).
2. From the user dropdown menu on the upper right-hand corner, go to Edit Profile.  

3. At the bottom of the API Token section, click Generate. 

4. The New API Token dialog box appears.           
   
             
    
5. The newly generated personal API Token appears (hidden) in the field.            
   If you want to view the hidden API token string, click the view icon (optional). 
6. Click Copy to copy the token into your clipboard.    

7. An email will be sent to the user, confirming the creation of a new API Token.                    
8. After generating a new API token, insert the new access key generated into the script in the API. See our API documentation.

Revoking an Existing API Token        

To replace an existing API Token in your account, you must first revoke the existing API token (since only one API token can exist at any given time, for any user). 

1. Sign in to your account (see Signing In).
2. From the user dropdown menu on the upper right-hand corner, go to the Edit Profile page, and click Revoke.

3.  The Revoke API token confirmation dialog box appears.

4. Read the warning message, and then click Revoke, to confirm revoking the API token.

5. You receive an email message confirming that your API token has been revoked.