API tokens

API tokens let you connect your own scripts, tools, or automations to InfraNest using the same actions you'd otherwise click through in the app. This article is for anyone who wants to automate tasks instead of doing them by hand.

Overview

• InfraNest has a full REST API, so anything you can do in the app, you can also do through automation.
• You get access to the API by creating an API Tokens entry, which acts like a key.
• Each token can be limited to exactly what it's allowed to do, and for how long.

Create a token

1. Go to API Tokens and select Create.
2. Give the token a name, choose its abilities (what it's allowed to do), and optionally set an expiry.

3. Select Copy to copy the token right away.

WarningCopy the token now — it's shown only once. Afterwards you'll only ever see a hint of the last few characters, and there's no way to reveal it again.

Choose abilities

Abilities control what each token can see or change. For every area, you can grant read or write access, and there's also a read-only preset and a full-access option. As a rule, give a token only what it actually needs.

Each area covers more than its name suggests:

• Domains & Contacts — domains, contacts, transfers, nameservers
• DNS — zones, records, templates
• Cloud Infrastructure — servers, volumes, snapshots, networks, firewalls, load balancers, cloud credentials
• Monitoring — uptime checks, incidents, maintenance, status pages, plus Certificates and webhooks, automations, integrations, and tags
• Drop Catch — watched domains and drop-catch attempts
• Members & Teams — members, invitations, roles, single sign-on
• Billing — subscription, invoices, payment methods, billing details (read only)
• Audit Log — your organisation's audit log (read only)
• Data export & import — exporting your data, and importing from a file

NoteCertificates and webhooks aren't separate areas — they're part of Monitoring, so a token that needs either one needs Monitoring access. Billing and the Audit Log are always read-only over the API — changing a subscription or paying an invoice can only be done by someone signed in to the app.

Manage tokens

1. Go to API Tokens to see your existing tokens.
2. Check the last-used date for each token to see if it's still active.
3. Select Remove on any token you want to revoke — this takes effect immediately.

TipThe full endpoint reference is in the app — select View full API documentation from the API Tokens page.

Troubleshooting

• Getting a "try again shortly" response? Some actions, like manual syncs and "check now", are rate-limited per organisation to protect the platform. Wait a little and retry.
• Lost your token? You can't view it again — create a new one and remove the old one.