Create an API token

Scoped tokens for scripts and pipelines, and how to keep them safe.

The API covers what you can do in the dashboard: sites, domains, DNS, backups and cache. Authentication is a bearer token.

Create one

1. Open Account → API tokens

   Choose Create token and name it after where it will be used, not after yourself.

2. Set the scopes

   Grant only what the script needs. A deployment pipeline usually needs cache:purge and nothing else.

3. Set an expiry

   Ninety days is a reasonable default. Tokens that never expire outlive the projects that used them.

4. Copy it once

   The token is shown once. Store it in your secret manager or CI secrets, never in the repository.

curl -H "Authorization: Bearer $WVC_TOKEN" \
     https://api.webvuecloud.com/v1/sites