ANTE User ManualAPI Tokens
The API Tokens page is where you create and manage the access tokens that let websites, apps, and other systems connect to your CMS content.
Overview
Each token is a secret key that an external system uses to access your CMS. From this page you can create new tokens, see which tokens already exist, regenerate a token, or delete one you no longer need.
To open it, go to CMS → API Tokens.
Token Types
When you create a token, you choose one of three types:
| Type | Description |
|---|---|
| Read Only | Can only read content |
| Full Access | Can read and modify content |
| Custom | A token with a custom-defined scope |
Page Layout
The page has two main areas:
- Token Cards - Two cards at the top showing your main Read Only and Full Access tokens. If a main token has not been set up, the card shows Not configured.
- All Tokens - A table listing every token you have created.
Each token card shows:
- The token name and an Active / Inactive status badge
- The token prefix (the first part of the token, followed by
...) - The token type, when it was last used, and an expiry date (if one is set)
- Copy Prefix and Regenerate buttons
The All Tokens table shows these columns:
| Column | Description |
|---|---|
| Name | The token name (and its description, if any) |
| Type | Read Only, Full Access, or Custom |
| Status | Active or Inactive |
| Last Used | When the token was last used (or Never) |
| Actions | Regenerate and Delete buttons |
Common Tasks
Creating a Token
Click the Create Token button (top right).
Fill in the form:
- Token Name (required) - A name for the token, e.g. Frontend App Token.
- Token Type - Choose Read Only, Full Access, or Custom.
- Description - An optional note describing what the token is for.
Click Create.
The new token is shown once in a Token Generated dialog.
⚠️ Important: Copy the token immediately — you won't be able to see it again. Click Copy to copy it to your clipboard, then Done to close.
Copying a Token Prefix
On a token card, click Copy Prefix to copy the visible prefix of the token to your clipboard.
Regenerating a Token
- Click the Regenerate button on a token card, or the refresh icon in the All Tokens table.
- A confirmation dialog appears warning that the current token will be invalidated and any application using the old token will need to be updated.
- Click Regenerate to confirm.
- The new token value is displayed once — copy it right away.
Deleting a Token
- Click the delete (trash) icon for the token in the All Tokens table.
- A confirmation dialog warns that any applications using the token will lose access.
- Click Delete to confirm.
Tips
- Copy tokens immediately — the full token value is only shown once, right after it is created or regenerated.
- Use Read Only where possible — give external systems only the access they need.
- Regenerate if compromised — if a token may have leaked, regenerate it to invalidate the old value.
- Check Last Used — the table shows when each token was last used, which helps you spot tokens you can safely delete.
Related Pages
- Content Manager - Manage your content
- Content Type Builder - Define your content types
- Webhooks - Notify external systems of changes
💡 Note: Treat API tokens like passwords. Anyone with a token can access your CMS content according to that token's type.