Create and revoke DobroDesk API tokens

Choose token ownership

• Use a workspace token for a shared server integration, import worker or automation owned by the organization.
• Use a personal token only for one person's script or private tool.
• Create a separate token for each integration so you can revoke one without stopping another.

Create a least-privilege token

1. 1

   Open Admin > Integrations > API tokens and select Create token.

   

2. 2

   Name the integration and choose Workspace or Personal ownership.

3. 3

   Select only the required scopes, for example read customers or write internal notes.

4. 4

   Store the token in your approved secret manager, not in source code, a browser or a shared document.

5. 5

   Test the integration with a non-destructive request then review its audit entry.

Review and revoke

Review active and expiring tokens regularly. Revoke a token immediately when its owner leaves, its secret may be exposed or the integration is retired, then replace it only after updating the affected integration.