API Authentication and Keys

Creating an API token

1. Open Account > API in the panel.
2. Click New token.
3. Choose a descriptive name and scope (for example, a single project).
4. Store the generated token in a secure secrets manager.

Using tokens with the API

Include the token in the Authorization header:

curl https://api.xenoncloud.org/v1/instances \
  -H "Authorization: Bearer <YOUR_TOKEN>"

Rotating tokens

Rotate tokens periodically and after suspected compromise:

• Create a new token.
• Update applications to use the new token.
• Revoke the old token once traffic has moved.