Create an API token#

Create an API token to programmatically authenticate through API requests.

Create an API token#

To create an API token for a signed-in Intelligence Center user profile:

  1. In the side navigation bar click the avatar image of your user profile.

  2. From the pop-up menu, click My profile.

  3. In the My profile view, click Edit on the bottom-right corner.

  4. In the Edit your profile view, browse to the API tokens section.

  5. Any existing API tokens are listed here.

  6. To create a new API token, click + Create API token.

  7. In the Create new API token dialog, enter a reader-friendly name to identify the API token.

  8. If you want the token to become invalid after a period of time, select the Select expiration date checkbox.

  9. From the drop-down menu select one of the predefined time intervals.

  10. Click Generate token to create a new API token with the selected settings.

Set your default source

When an API request creates entities or observables, the system will automatically assign a user group as its source. This assignment is based on the profile of the user who created the token used in the API request.

Set your default source to make sure the system chooses the correct one for requests made with your tokens.

Copy the API token#

After generating the API token, a confirmation dialog displays the token value in plain text.

This is a one-off action: after closing the confirmation dialog, you won’t be able to view the token value anymore.

Copy the token value and, if necessary, store it for reference.

View API tokens#

To view existing API tokens belonging to a signed-in Intelligence Center user profile:

  1. In the side navigation bar click the avatar image of your user profile.

  2. From the pop-up menu, click My profile.

  3. In the My profile view, click Edit on the bottom-right corner.

  4. In the Edit your profile view, browse to the API tokens section.

    Any existing API tokens are listed here.

    You can view the following token details: #. API token name. #. API token expiration date. #. The most recent date when the API token was last used.