Tokens

Tokens lets your scripts, integrations and agents call TotalBase as you. It shows only if one of your roles allows tokens (API access, or Admin for an administrator).

New token asks for a name, an optional description and the access:

The token is shown once: copy it then. TotalBase keeps only a hash.

Each token can be:

• Regenerated…: a new secret, with the current one still working for a while you choose (Stops now, For 1 hour, For 24 hours, For 7 days), so you can update the program without downtime;
• Revoked: it stops at once, for good;
• Deleted….

Filter by status (Active, Expiring, Expired, Revoked) and access. A token expires after 365 days by default, and is flagged as expiring 30 days before.

A token acts as you: it can do what you can, and nothing more. See API tokens for the details.

Next steps

• Authentication: using a token.