API Tokens

API Tokens

API tokens authenticate requests to the REST API. Manage them under System → API Tokens.

Creating a Token

1. Go to System → API Tokens
2. Click New Token
3. Enter a descriptive name (e.g. "Mobile App", "Next.js Frontend")
4. Choose abilities: read, write, or * (full access)
5. Optionally set an expiry date
6. Copy the token immediately — it is only shown once

Using a Token

Authorization: Bearer your-token-here

Example with curl:

curl -H "Authorization: Bearer your-token-here" \
  http://localhost:8080/api/marble/items/blog_post

Example with JavaScript:

const res = await fetch('/api/marble/items/blog_post', {
    headers: { 'Authorization': 'Bearer your-token-here' }
});
const data = await res.json();

Public Blueprints

If a blueprint has API Public enabled, its items can be fetched without a token. All other blueprints require a valid token.

Revoking a Token

Click Delete next to the token. The token is immediately invalidated.