Personal Access Tokens

What personal access tokens are

Personal access tokens allow you to authenticate Web API requests without using your account credentials. These tokens are scoped, revocable, and can be given an expiry, offering a secure way to interact with Cryptlex programmatically.

Use cases

  • Automating license and release management via the Web API
  • Integrating with CI/CD pipelines
  • Connecting third-party tools or internal scripts to Cryptlex

Creating an access token

  1. Go to the Developer -> Access Tokens page from the sidebar in the admin portal.
  2. Click the Create button.
  3. In the popup:
    • Enter a name for the token.
    • Set an expiration date. Leave it blank to create a token that never expires.
    • Assign permissions by selecting the required scopes (Read or Write access) for each module, such as Activations, Releases, and Licenses.
  4. Click Create.
  5. On the next screen, copy the access token and store it securely. For security, Cryptlex does not keep a retrievable copy, so it cannot be shown again. If you lose it, revoke it and create a new one.

Using an access token

Pass the token in the Authorization header as a Bearer token with every Web API request. The base URL is https://api.cryptlex.com/v3; if your account is in the EU region, use https://api.eu.cryptlex.com/v3 instead.

curl https://api.cryptlex.com/v3/licenses \
   -H "Authorization: Bearer {ACCESS_TOKEN}"

Token lifetime and rotation

Set an expiration date whenever you can. A blank expiry creates a token that never expires, so use non-expiring tokens only for long-lived automation.

To rotate a token, use the Rotate action on the Developer -> Access Tokens page. This generates a new value while keeping the token's name and permissions; copy the new value (same one-time visibility rule as above) and update your application or integration. Rotate periodically, and immediately if a token is exposed or leaked.

Permissions overview

Each token can be customized with fine-grained permissions:

  • Read: allows retrieving data, such as listing licenses or fetching release details.
  • Write: allows performing actions, such as creating licenses or updating releases.
Auto-UpdatesWebhooks
Last updated: