API token management

This feature allows you to issue and manage API tokens.
Since these tokens allow access to Alpacon API without authentication, never share them externally.

Token list

View tokens

You can check Name, Valid through, and last update.
If no expiration date is set, it is displayed as “unlimited”.

Create token

Click the Add button.
Set the token’s Name and Valid through, then create the token.
When creating a token, you will be redirected to the detail screen of the created token, and the generated token can only be viewed on that screen.
→ Since it cannot be retrieved again after leaving the page, be sure to copy and store it in a safe location.

Token detail

Click on each token in the token list to navigate to that token’s detail screen.

Token management

You can activate or deactivate tokens using the toggle button in the top right corner.
Manage the following items:

Function	Description
Update Token	You can modify the token’s name and expiration date.
Delete Token	Delete the corresponding token.
Command ACL	Security setting that can restrict commands executable with the token.

Command ACL (Command Access Control)

Command ACL is a function that controls commands executable with the corresponding API token.

If no commands are registered: All commands are executable
If at least one command is registered: Only registered commands are executable

⚠️ It is recommended to set Command ACL for security enhancement.

Function	Description
View Commands	You can check the list of currently registered commands.
Add Command	Enter the command in the Add new command section and click the Save button.
Delete Command	You can delete from the existing command list.