Authentication
Every NocoDB API request needs an API token. Send the token in the xc-token header or in the Authorization header as a Bearer token.
API Tokens
Use API tokens to authorize NocoDB API requests. With API tokens, you can integrate NocoDB with third-party apps. For more information, refer to API Tokens Management.
Send the token
curl -H "xc-token: nc_pat_..." https://your-nocodb.com/api/v3/...The two methods are equivalent. Use the method that fits the authentication pattern of your application. When a request sends both headers, NocoDB uses xc-token.
A request succeeds only when the token and the role of the user who owns the token both allow it.
Swagger UI
You can work with the API resources in the Swagger UI. For more information, refer to Swagger APIs Doc.
Good to know
- Store tokens securely. For the full list of token practices, see Security Best Practices.
- A token that you created before a workspace enforced SSO does not work for that workspace. See API Token Access with SSO-Enabled Workspaces.
Related
Last updated on
Latest product updates?See Changelog