Using API Tokens to access MantisHub

API tokens provide users with more control, convenience, visibility and security when providing other services and apps access to their MantisHub.

Here are some of the benefits of API tokens compared with using passwords:

• Tokens are 32 characters long and cryptographically secure, hence, they are much more secure than user passwords.
• Tokens are generated by MantisHub, so they aren’t passwords shared with other internet services.
• Users can see when each token was last used to access MantisHub.
• Users can revoke a token without affecting the others, selectively denying access to specific services.
• Users can change their passwords without affecting the validity of the API tokens.

Users can generate API tokens via My Account – API Tokens. The tokens are displayed only once and should be used for one integration. They can be passed in the password field when calling the MantisHub APIs. Note that they can’t be used to log in via the MantisHub login page.