Personal API Tokens

Learn how to create and delete personal API tokens

Personal API tokens enable secure, programmatic access to the Apono API when using tools like Terraform or building integrations.

Tokens have the following security characteristics:

• User-Scoped Access: Inherits specific user permissions and access

• One-Time Display: Viewable only during initial creation, then masked permanently

• Account Dependency: Deactivates automatically when the associated user account is deleted

---

Prerequisite

Item	Description
Apono UI Credentials	Username and password information used to access the Apono UI

---

Create a personal API token

Add Personal API Token and Token sections

Follow these steps to create a personal API token:

1. On the Personal API Token page, click Add API Token or Create Token. The Add Personal API Token page opens.
2. Under Add Personal API Token, enter a token name in the text field. The name will identify the token on the Personal API Token page.

The name must be a minimum of 3 characters.

1. Click Generate New Token. The token appears.

2. Under Token, copy the token.

Be sure to copy and securely store this token in a password manager. This is the only time the secret will be displayed.

1. Click Done. The new token will appear on the Personal API Tokens page.

After creating a personal API token, you can authenticate your queries to the Apono API. We strongly advise not to hardcode a token in your code. Use environment variables or secret management.

---

Delete a personal API token

Deleting an API token is an important security practice when the token is no longer needed.

Before deleting an API token, remove the token from any project, code base, or third-party platform to prevent service disruptions.

Delete confirmation popup

Follow these steps to delete a personal API token:

1. On the Personal API Token page, in the row of the API token, click Delete. A delete confirmation popup window appears.
2. Click Yes. The API token is deleted.