Manage API Tokens
API tokens let automation authenticate to Sysand Index. Prefer trusted publishing for CI systems when it is available.
Create A User Token¶
Open account tokens, create a token with a clear name and expiration, then copy it when shown.
The full token is shown only once. Store it in a secret manager and rotate it if it may have been exposed.
Revoke A Token¶
Revoke tokens that are no longer used, were exposed, or belonged to old automation.
Revocation applies to future API requests.
Choose Token Or Trusted Publishing¶
Use trusted publishing when your CI provider supports it. Use API tokens for automation that cannot use trusted publishing yet.