Create API token

POST/v2/tokens

Creates an API token and returns its secret token value, which you can't retrieve again. You can only grant capabilities you have yourself. If you omit expiresAt, the token doesn't expire.

Body

application/json

Property	Type	Description
`datasetCapabilities`	`object`
`description`	`string`	Description of the token
`expiresAt`	`string<date-time>`	Expiration date of the token (ISO 8601 format)
`name`	`string`Required	Name of the token
`orgCapabilities`	`object`
`annotations`	`string[]`	Annotations capability
`apiTokens`	`string[]`	API tokens capability
`auditLog`	`string[]`	Audit Log capability
`billing`	`string[]`	Billing capability
`dashboards`	`string[]`	Dashboards capability
`datasets`	`string[]`	Datasets capability
`endpoints`	`string[]`	Endpoints capability
`integrations`	`string[]`	Integrations capability
`labels`	`string[]`	Labels capability
`monitors`	`string[]`	Monitors capability
`notifiers`	`string[]`	Notifiers capability
`rbac`	`string[]`	Access control capability
`sharedAccessKeys`	`string[]`	Shared access keys capability
`users`	`string[]`	Users capability
`views`	`string[]`	Views capability
`viewCapabilities`	`object`

Request

curl -X POST 'https://api.axiom.co/v2/tokens' \
  -H 'Authorization: Bearer API_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{"datasetCapabilities":{},"description":"string","expiresAt":"2026-01-01T00:00:00Z","name":"string","orgCapabilities":{"annotations":["create"],"apiTokens":["create"],"auditLog":["read"],"billing":["read"],"dashboards":["create"],"datasets":["create"],"endpoints":["create"],"integrations":["create"],"labels":["create"],"monitors":["create"],"notifiers":["create"],"rbac":["create"],"sharedAccessKeys":["read"],"users":["create"],"views":["create"]},"viewCapabilities":{}}'

Try itRun this request against your Axiom organization

Credentials stay in this browser tab and are only sent to Axiom when you run the request.

API token RequiredRequest body application/json

Response

200Created API token, including its secret `token` value.

application/json

400No capability set, an invalid capability, or a capability the caller doesn't have.