Developers

Creating and managing API tokens

Generate personal access tokens to authenticate REST API requests.

#api #token #auth #developer
  1. Go to /account/developer/tokens.
  2. Click New Token, give it a descriptive name, and select scopes (read, write, auction-manage, etc.).
  3. Copy the token immediately — it is shown only once.
  4. Pass the token as a Bearer in the Authorization header: Authorization: Bearer {token}.
  5. Revoke tokens you no longer need from the same page.

Token scopes

  1. read — read-only access to auctions, lots, bids.
  2. write — create and update resources.
  3. auction-manage — manage auctions and lots.
  4. webhook-manage — subscribe and manage webhooks.
Tip: Use narrow scopes. A webhook-only integration should only have the webhook-manage scope.

Last updated: 2026-07-12