API Tokens

API Tokens are unique keys used to authenticate your application or system when interacting with the Euler platform. They act as passwords for your app, identifying and authorizing it to access specific resources.

Never hard-code API tokens directly into your codebase. Instead, store them securely using environment variables or a secrets manager.

How API Tokens Work

When your application sends a request to the Euler API, the API Token authenticates your app and determines what it is allowed to do. Think of it as a way to grant your app permissions without needing to share your personal account credentials.

Best Practices for API Tokens

  1. Store Tokens Securely

    • Never share your API Token publicly or include it in your codebase.
    • Use environment variables or a secure vault to store tokens.
  2. Use Short-Lived Tokens

    • When possible, use expiration dates to limit the validity of tokens and reduce risk.
  3. Monitor and Rotate Tokens

    • Regularly rotate tokens and revoke any tokens that are no longer in use.
    • Monitor API usage to ensure no unauthorized requests are made.
  4. Grant Minimal Permissions

    • Scope tokens to only the resources and permissions your application needs.

Managing API Tokens

You can manage API Tokens through the Integrations & API section in your Euler dashboard.

  1. Create Tokens: Assign names and optional expiration dates to your tokens for better organization.
  2. Revoke Tokens: Instantly revoke tokens that are no longer needed or may have been compromised.
  3. View Token Details: Review token usage and ensure they are still valid for your application needs.