Skip to main content

​
Overview

Access tokens are used to authenticate requests to the Cloud API. Tokens do not expire and remain valid until manually revoked, so treat them like passwords.

​
Creating a Token

  1. Navigate to the API Tokens page
    Go to the API Tokens page in your Utexo Cloud dashboard and click “Create Access Token”.
  2. Provide a token name
    Enter a descriptive name for the token. Using meaningful names (e.g., production-server, dev-laptop) helps you identify and manage multiple tokens.
  3. Copy and store the token securely
    The token is shown once. Store it in a secrets manager or environment variable immediately.

​
Using the Token

Export the token as an environment variable and include it in API requests: 
export CLOUD_API_TOKEN="<your_token>"

curl -H "Authorization: Bearer ${CLOUD_API_TOKEN}" \
  "https://cloud-api.thunderstack.org/api/nodes"
See the Cloud API reference for all available endpoints.

​
Revoking a Token

Revoking a token immediately deactivates it and prevents any further API access using that token.
To revoke a token:
  1. Return to the API Tokens section in your dashboard.
  2. Find the token item you want to revoke.
  3. Click the “Revoke” button for that token.