~/enine-sites-help/developers/how-to-get-an-api-token

How to get an API token

Email us from your account address and name the site; we send back a token to use in the Authorization header.

how-to-get-an-api-token.md214 words · ~1 min read

You need an Enine Sites account and a site.

Steps

  1. Email hello@eninesites.com from the address on your account.
  2. Say which site the token is for.
  3. Keep the single string we send back somewhere safe, such as an environment variable.
  4. Send it in the Authorization header of every request, as shown below.
curl -H "Authorization: Token $ENINE_TOKEN" \
  https://e9sites.com/api/v1/site/

You should see

A list of your sites, instead of a 401 error.

Ways to authenticate

MethodWhat you sendWho uses it
TokenAuthorization: TokenScripts, servers, and anything headless
SessionThe sessionid cookieThe manager in your browser, automatically
OAuth2Authorization: BearerMCP clients, such as an AI assistant

Keep it safe

  • Treat the token like a password. It carries your role on every site you belong to.
  • Never put it in code you commit. Use an environment variable.
  • Tokens do not expire on a schedule. They stay valid until we deactivate them.
  • If a token leaks, email us and we will deactivate it immediately.

Next