Help

API Tokens

API tokens allow external applications and scripts to authenticate with the TowerOps REST and GraphQL APIs. Each token belongs to one organization and carries only the scopes you tick, and tokens are managed from the API tab of your account settings.

Creating a Token

1. Go to Account Settings → API tab
2. Click "New Token"
3. Give the token a name (e.g., "Grafana Integration"), pick the organization it can access, and select at least one scope
4. Copy the token from the confirmation dialog immediately, it will only be shown once

Only owners and admins of an organization can create tokens for it, and your email address must be confirmed before the New Token button works.

The token list shows each token's organization, when it was last used, and its scopes; tokens created before scopes existed are marked as full access. Delete revokes a token permanently.

Using a Token

Include the token in the Authorization header:

Authorization: Bearer your-api-token-here

Security Best Practices

• Create separate tokens for each integration, don't reuse tokens across services
• Revoke tokens you no longer need
• Never commit tokens to version control
• Store tokens in environment variables or a secrets manager