Content Management API > API token

1
POST https://site-api.datocms.com/access_tokens HTTP/1.1
2
Authorization: Bearer YOUR-API-TOKEN
3
Accept: application/json
4
X-Api-Version: 3
5
Content-Type: application/vnd.api+json
6

7
{
8
  "data": {
9
    "type": "access_token",
10
    "attributes": {
11
      "name": "Read-only API token",
12
      "can_access_cda": true,
13
      "can_access_cda_preview": true,
14
      "can_access_cma": true
15
    },
16
    "relationships": {
17
      "role": {
18
        "data": {
19
          "type": "role",
20
          "id": "34"
21
        }
22
      }
23
    }
24
  }
25
}

1
await fetch("https://site-api.datocms.com/access_tokens", {
2
  method: "POST",
3
  headers: {
4
    Authorization: "Bearer YOUR-API-TOKEN",
5
    Accept: "application/json",
6
    "X-Api-Version": "3",
7
    "Content-Type": "application/vnd.api+json",
8
  },
9
  body: JSON.stringify({
10
    data: {
11
      type: "access_token",
12
      attributes: {
13
        name: "Read-only API token",
14
        can_access_cda: true,
15
        can_access_cda_preview: true,
16
        can_access_cma: true,
17
      },
18
      relationships: { role: { data: { type: "role", id: "34" } } },
19
    },
20
  }),
21
});

1
HTTP/1.1 200 OK
2
Content-Type: application/json
3
Cache-Control: cache-control: max-age=0, private, must-revalidate
4
X-RateLimit-Limit: 30
5
X-RateLimit-Remaining: 28
6

7
{
8
  "data": {
9
    "type": "access_token",
10
    "id": "312",
11
    "attributes": {
12
      "name": "Read-only API token",
13
      "hardcoded_type": "",
14
      "can_access_cda": true,
15
      "can_access_cda_preview": true,
16
      "can_access_cma": true
17
    },
18
    "relationships": {
19
      "role": {
20
        "data": {
21
          "type": "role",
22
          "id": "34"
23
        }
24
      }
25
    }
26
  }
27
}