Skip to main content
MindTouch Success Center

Generate a browser API token

Generate browser API tokens for external development efforts or for MindTouch integrations requiring API access.

To generate an API token, you must be an Administrator and have an allowance of tokens.

Why you need a browser API token

Browser API tokens are used for cross origin development and integration between your web application and your MindTouch website. Normally, web browsers such as Google Chrome or Mozilla Firefox do not allow JavaScript applications running on one website to access data from another. Browsers block cross-origin requests and responses due to the security issues it can cause, especially if one website's JavaScript application uses the cookies of another website to impersonate a user's identity for nefarious purposes. However, a website can declare which third party websites can securely access its data using Cross Origin Resource Sharing. Browser API tokens allow developers to implement CORS in a safe and secure manner. In addition to CORS, browser API tokens also allow same origin API access from JavaScript executing in your MindTouch content to your MindTouch site API.

Get API token from Dashboard

  1. Navigate to Site tools > Dashboard > Integrations > API Token Management.
    If you cannot find API token management within Integrations, contact your Customer Success Manager to enable the feature.
  2. Select the Browser radio button.
  3. Enter a Name for the token that is easy to track and manage.
  4. Enter the Host name or domain where you want your integration to run.
    • For example, if you are looking to integrate into a CRM web application located on the hostname myinstance.example.com, you would specifymyinstance.example.com. The host value can also accept wildcards and commas, allowing the API token to provide MindTouch API access to all subdomains of a domain, such as *.example.comor foo.example.com,bar.example.com.
  5. Click Generate API token.
    This image shows the token management page in the Dashboard
  6. Record the API token information for later reference.
  • Was this article helpful?