Access Token
An Access Token is a secure credential used to authenticate and authorize API requests to the IO River platform. It allows automated systems to interact with IO River’s APIs without using account passwords. Each token is associated with specific permissions and can be revoked at any time to maintain security and control over API access.
Creating an Access Token
To create a new access token:
-
Navigate to the Account page.
-
In the sidebar, select Account Tokens.
-
Click on the Generate Token button.
-
Fill out the new token form:
- Token Name – Name of the token.
- Role – Select the role for the token. If you need a token for purging content via API, select Purge.
- Expiration Date – After this date, the token cannot be used. You can enable the No Expiration option to disable expiration.
-
Click on the Create button.
The new token will be displayed. You should copy it before closing the window, as it will not be accessible afterward.
Restricting a Token to Specific Services
By default, the created token has access to all services.
You can restrict it to a specific set of services if needed.
To restrict a token to specific services:
- Navigate to the Account page.
- In the sidebar, select Account Tokens.
- Locate the token and select Service Restrictions from the Options dropdown.
- Select Specific Services and check the services you want the token to access.
- Click Approve.
Deleting an Access Token
You can revoke an access token by deleting it from your account.
To delete a token:
- Navigate to the Account page.
- In the sidebar, select Account Tokens.
- Locate the token and select Delete Token from the Options dropdown.
- Click Delete.
Once deleted, any API request using this token will be unauthorized.