Personal Access Tokens

Personal access tokens can be used by third-party applications and scripts to authenticate with the Cryptlex API. They function similarly to API keys and offer fine-grained access control.

Once you have your token, you can authenticate your API requests by passing it in the "Authorization" header.

Authorization: Bearer {ACCESS_TOKEN}

Keep your access tokens secure and do not share them in publicly accessible areas such as Github, client-side code, and so forth.

Creating a personal access token

You can easily create personal access tokens through the admin portal. Go to the Developer -> Access Tokens section in the admin portal and click the add button. A form with the following fields will popup:

Name

Name for the access token.

Expiration Date

The expiration date for the token. Leave empty for no expiry.

Scopes

The permissions to restrict the actions the token can be used to perform.

Revoking a personal access token

At any time, you can revoke any personal access token by just clicking the "Revoke" option from the actions menu.

Limiting scopes of a personal access token

Personal access tokens can be created with one or more scopes that allow various actions that a given token can perform. You should always scope the token access to the minimum required resources, by adding the minimum number of permissions. The available scopes (permissions) are depicted in the following table.

Last updated