API tokens

A API token is a access token that

  • is used for Security Cloud Control REST API calls in Security Cloud Control.

  • must be included in the REST API authorization header for a successful call.

  • is long-lived and does not expire, but can be renewed or revoked.

API token use and generation

To generate an API token in Security Cloud Control, you must first create an API Only User if one does not already exist. This user is specifically designated for API token generation and usage.

Once the API Only User is created, you can generate a new API token for that user. The token is visible only immediately after it is generated and remains visible as long as you stay on the General Settings page. If you navigate away and then return to the General Settings page, the token will no longer be displayed, although it is clear that a token has been issued.

Note

API Only Users can generate API tokens; individual users cannot create API tokens for themselves or others.