API tokens
Beta
This feature is available on request. Contact support to enable it for your account.
API tokens allow you to authenticate with the IO API to programmatically manage your events, orders, and attendees.
Creating a token
- Go to your Account settings
- Navigate to API tokens
- Click Create API token
- Give your token a descriptive name
- Choose which events it should be able to access
- Save your API token
- Copy the token immediately - it will only be shown once. Note We store part of the token as a one-way hash, so we have no way of retrieving a full token after it has been created. If you lose your token, you will need to create a new one.
Token security
- Each token is scoped to a single account
- Tokens can be revoked at any time
- Do not share tokens or commit them to version control
- We recommend using a secrets manager to store tokens in your applications
Revoking a token
If a token is compromised, revoke it immediately from the API tokens page. Create a new token and update your applications.