Access Tokens

Access tokens are used to authenticate requests to the Palactix API.

Every API request must include a valid access token.

How It Works

1. You generate a token using your app credentials
2. Palactix issues a Bearer token
3. You include this token in API requests

Example Usage

Authorization: Bearer plx_abc123...

Token Properties

• Type: Bearer token
• Scope: Full API access (*)
• Expiry: Long-lived (default: 1 year)

Token Behavior

• Only one active token per app
• Generating a new token revokes the old one
• Tokens are linked to the app admin user

When to Generate a New Token

• Token expired
• Token compromised
• Secret rotated

Security Best Practices

• Never expose tokens in frontend code
• Store tokens securely (server-side)
• Rotate tokens periodically

Get Your Token

Generate OAuth Token