Generating an API token
- Sign in to Enclave
- Navigate to Settings → API Tokens
- Click New Token
- Set a name, expiry, and permission scope
- Copy the token — it is shown only once
Token scopes
| Scope | Access |
|---|---|
read:rooms | List and view rooms |
write:rooms | Create, update, archive rooms |
read:files | Download files |
write:files | Upload, rename, delete files |
read:users | List users and Org Unit memberships |
write:users | Invite users, change roles |
read:audit | Export audit logs |
admin | Full access (use with caution) |
Using a token
Token format
Tokens are prefixed for easy identification:enclv_live_— production tokenenclv_test_— sandbox token (if enabled)
Revoking a token
Tokens can be revoked at any time from Settings → API Tokens → Revoke. Revocation is immediate — in-flight requests using the token will fail with401 Unauthorized.