The RASL API uses token-based authentication to securely identify and
authorize API requests.

All API requests must include a valid API token in the Authorization
header using the Bearer authentication scheme.

Authentication Method

RASL APIs use Bearer Token Authentication.
Each request must include the following HTTP header:

Getting Your API Token

To generate an API token, you must first log in to your RASL account
and enable API access for your tenant.

After logging in, go to: System Settings → API Management

This section allows you to manage API access and tokens for your tenant.

Toggle Enable API Access to activate API usage for your tenant.
API access must be enabled before generating tokens.

Click Generate New Token to create a new API token.
Once generated:

Copy the token immediately

Store it securely

Do not share it publicly

For security reasons, the token may not be shown again after creation.

API tokens are tenant-scoped

Each token grants access to the APIs available to your tenant

Tokens inherit the permissions configured in the platform

If API access is disabled, all associated tokens will become inactive.

Keep your API tokens confidential

Never expose tokens in client-side applications

Rotate tokens periodically

Revoke unused or compromised tokens immediately

Use environment variables to store tokens securely