Create Access Token - New UI

You need an access token to use the JFrog Connect API. This page describes how to get tokens for Connect API v2 and is for users with the new web UI.

To use the JFrog Connect API v2, you need an access token. There are two types of tokens, described below, and you can use either one for the API.

Important: Use this page only if you have the new web UI. If you have the old UI, use Create Access Token for the old UI.

User Token

The user-scoped token provides access according to the user role (admin or non-admin) defined for the user in the JFrog Platform. If the user is a non-admin role, the token has access according to permissions defined for the user in the User Permissions page in Connect. Only an administrator user can generate a user token.

The user token is created in JFrog Platform and valid in both JFrog Platform and Connect.

To generate a user token, refer to the Access Tokens page.

Device Details Token

This token, also known as a resource-scoped token or a custom token, has permissions that are customized for a specific purpose. For example, the token allows access by any Connect user, but allows access only to certain resources (e.g., a device or a project) and functions (e.g., read or write), and not to others. This increases the system security by enabling you to construct a token that is very specific to the permissions allowed.

The Device Details Token can be created only in Connect and only by an administrator user. The token is valid only in Connect. Once you have created the token, it is managed in JFrog Platform where all of your tokens are managed.

Tip: All of your tokens are managed in JFrog Platform.

Create Device Details Token

To create a device details token, do the following:

1. Go to General Settings in the left navigation bar and to the Account tab.

2. Under Access Token, click Device Details Token. The Generate Device Details Token panel appears on the right.

1. Enter a Description and an Expiration Date for the new token.

2. Under Permissions, choose a Target Entity:

   • Fleet: From the dropdown list, choose the fleet the token will have access to.

   • Device: From the dropdown list, choose the device (device name) the token will have access to.

1. Choose the Permission Type, e.g., Read, Write, or Delete. You can choose one or multiple permission types.

2. Generate the token and save it to the clipboard.

Generated Token

After you generate the new access token, it will be displayed.

Important:

• For security reasons, the new token generated will not be stored. Ensure that you copy the token and keep it in a safe place. Once you close the token display window, it will not be available again.

• Do not expose the token in your API request tool. It is highly recommended to use an API tool that handles the token securely (for example, it uses a variable for your token), and not to expose the token directly.

What’s Next?

Learn about the Connect API v2 and the details of all the API requests you can use.