Private API tokens maintenance
For Premium e-shops, a screen in the administration allows you to maintain your tokens for Private API. You can find it
in the Connections → Private API.
There is a list of tokens generated, if there are any. The token itself is an alphanumeric (with a dash - char) 38-60
characters long string. Each token has its description so you can easily identify them by purpose. For security reasons,
we recommend you use separate tokens for each service connected to your e-shop. You can generate up to 10 tokens.
There is no validity limit for the tokens.
To add a new token, click on the Add button. You will be asked to enter a description. Once submitted, the new token will
be displayed in the list of tokens. For security reasons, only the first two and last two characters are displayed.
To see the complete token, click on it. You will be prompted to repeat your password, and then your token will be displayed. Be careful not to compromise it – all data from your e-shop can be read using the token.
If you do not need any of the tokens, remove them promptly so they cannot be misused. Locate the token, move your mouse the
the Action column and press the red cross to delete it.
If you are at risk, any of your tokens might have gotten leaked, you should:
- delete token and add a new one, or
- regenerate an existing one in the administration.