API Tokens

API tokens let you interact with your workspaces and projects programmatically. You can use tokens to automate workflows, integrate with other tools, or build custom applications on top of the platform.

Generating a token

Self-service token generation is not currently available. API token creation is restricted to administrators, and Preferences does not include an API Tokens section. Regular users therefore cannot create or name tokens from account settings.

If an administrator has provisioned a token for you, keep it secure. Zelares does not provide a self-service page for retrieving the raw token again or managing it afterward.

Using a token

Include the token in the Authorization header of your HTTP requests:

Authorization: Bearer <your-token>

Managing tokens

Zelares does not currently provide a self-service list of API tokens or a token-revocation control in Preferences. If a provisioned token is no longer needed or may have been exposed, stop using it and contact the administrator or maintainer responsible for provisioning it so they can handle replacement or invalidation through the current administrative process.

Security

• Treat tokens like passwords, do not share them or commit them to version control.
• Keep tokens out of client-side code, URLs, screenshots, and logs.
• Store tokens only in secure configuration appropriate for the application or script that uses them.
• If you suspect a token has been exposed, stop using it and notify the administrator or maintainer responsible for provisioning it.