API Token

It is possible to authenticate to Mist API using an API token. This method provides a secure way to access the API without using email/password credentials.

Two types of API tokens are supported: personal API tokens and organization API tokens. More details these two types of tokens and how to create them can be found on the API Tokens page.

Using API Tokens for AuthenticationCopy Anchor Link

HTTP Header AuthenticationCopy Anchor Link

Include your API token in the Authorization header:

Authorization: Token <your-api-token>

Example RequestCopy Anchor Link

curl -X GET "https://api.mist.com/api/v1/self" \
    -H "Authorization: Token your-api-token-here"

Security Best PracticesCopy Anchor Link

• Store tokens securely and never expose them in client-side code
• Use organization tokens for automated systems and personal tokens for individual access
• Regularly rotate tokens and revoke unused ones
• Monitor token usage through audit logs

Token PermissionsCopy Anchor Link

API tokens inherit the permissions of the user or organization they belong to. Ensure proper role-based access control is configured before generating tokens.