Authenticate API requests

API tokens let tools and scripts access your organization’s data. Create a token, store it securely, and send it as a Bearer token with each API request.

You must be an organization administrator to create a token.

1. Go to Settings → API tokens.
2. Under Create API token, enter a label that identifies how the token will be used, such as Deployment inventory.
3. Select Create token.
4. Copy the token and store it secure before you close the dialog.

The token is displayed only once. If you lose it, revoke the token and create a new one.

Created tokens expire after 90 days.

Send the token in the Authorization header using the Bearer scheme:

curl \
  --header "Authorization: Bearer $CRACI_API_TOKEN" \
  "https://api.craci.dev/<endpoint>"

Every organization administrator can view the organization’s active token labels and identifying hints, create tokens, and revoke tokens. Administrators cannot view the secret value of an existing token.

To revoke a token, go to Settings → API tokens, find the token under Active API tokens, and select Revoke. Requests using it stop working immediately. Revocation cannot be undone.

Choose a label that identifies the token’s owner or purpose so another administrator can rotate or revoke it safely. Replace tokens before they expire, then revoke tokens that are no longer needed.

See the OpenAPI definition for the available endpoints, parameters, response schemas, and authentication requirements.