Endpoint Tokens

Secure your API endpoints with authentication tokens. Control access, set individual rate limits, and track usage per token.

What are Endpoint Tokens?

Endpoint tokens are authentication credentials that allow access to your API endpoints. Each token is unique and can have its own:

  • Rate limits
  • Expiration date
  • Usage tracking
  • Active/inactive status

Creating a Token

  1. Open your endpoint's detail page
  2. In the "Access Tokens" section, click Create Token
  3. Fill in the details:
    • Name: Identify the token's purpose (e.g., "Mobile App Production")
    • Note: Optional description of how/where the token is used
    • Rate Limit: Maximum requests for this token (leave empty for unlimited)
    • Expires At: Optional expiration date
  4. Click Create Token

Save your token immediately

The full token value is only shown once when created. Copy it immediately and store it securely. After leaving the page, you'll only see a masked version.

Token Format

Tokens follow this format: 

cmai_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

The cmai_ prefix identifies it as a ConfigureMyAI token.

Using Tokens

Include the token in the Authorization header: 

Authorization: Bearer cmai_your_token_here

Example Request

curl -X POST https://configuremyai.com/api/v1/endpoint-path \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer cmai_abc123xyz789..." \
  -d '{"messages": [{"role": "user", "content": "Hello"}]}'

Token Settings

Setting Description
Name Identifier for the token
Note Description of the token's use case
Rate Limit Maximum requests allowed for this token
Expires At Date/time when the token becomes invalid
Active Toggle to enable/disable the token

Managing Tokens

Viewing Token Details

Click on a token to view:

  • Masked token value (first and last few characters)
  • Usage statistics (calls made, last used)
  • Rate limit status
  • Expiration status

Disabling a Token

To temporarily disable a token without deleting it, toggle the "Active" switch. Disabled tokens will return 401 Unauthorized on all requests.

Regenerating a Token

If a token is compromised:

  1. Open the token's detail page
  2. Click Regenerate Token
  3. Confirm the action
  4. Copy the new token value immediately

The old token is immediately invalidated.

Resetting Rate Limits

If a token has hit its rate limit, you can reset the counter:

  1. Open the token's detail page
  2. Click Reset Calls
  3. The call counter resets to zero

Deleting a Token

To permanently delete a token, click the delete button. This action cannot be undone, and any applications using this token will immediately lose access.

Best Practices

  1. Use separate tokens for each application
    This allows you to track usage and revoke access independently.
  2. Set appropriate rate limits
    Protect against abuse and unexpected costs.
  3. Use expiration dates for temporary access
    Tokens for testing or temporary integrations should expire automatically.
  4. Document token usage in notes
    Record where each token is used for easier management.
  5. Regularly audit and rotate tokens
    Review token usage periodically and regenerate tokens that may be compromised.