# API Tokens

The Marketplace Platform uses API tokens to authenticate requests to the [REST API](https://docs.platform.softwareone.com/developer-resources/rest-api).

Your API token must be included in the **Authorization** HTTP header with the **Bearer** prefix for authentication. For example, the following request could be used to retrieve a list of buyers:

```http
GET https://api.platform.softwareone.com/public/v1/accounts/buyers
Authorization: Bearer {TOKEN_VALUE}
```

Your API keys have permissions assigned to them, so keep them secure. Do not share your secret API keys in public areas, like GitHub or client-side code. 

{% hint style="info" %}
All API requests must be made over **HTTPS**. Calls made over plain **HTTP** will fail. API requests without authentication will also fail.
{% endhint %}

### Accessing API tokens

The **API tokens** page allows account administrators to create and view API tokens. Administrators can also edit, delete, enable, or disable a token.

To navigate to the **API tokens** page, select the main menu, then choose **Settings** > **API tokens**. The list of tokens is displayed as shown in the following image:

<div data-with-frame="true"><figure><img src="https://content.gitbook.com/content/Z5DNbniz33mXCZoO62Rm/blobs/kvC0WviWr5LSenWHB5rU/API%20token.png" alt=""><figcaption><p>The API tokens in the platform.</p></figcaption></figure></div>

### Related topics

{% content-ref url="api-tokens/token-states" %}
[token-states](https://docs.platform.softwareone.com/modules-and-features/settings/api-tokens/token-states)
{% endcontent-ref %}

{% content-ref url="api-tokens/create-api-token" %}
[create-api-token](https://docs.platform.softwareone.com/modules-and-features/settings/api-tokens/create-api-token)
{% endcontent-ref %}

{% content-ref url="api-tokens/view-api-tokens" %}
[view-api-tokens](https://docs.platform.softwareone.com/modules-and-features/settings/api-tokens/view-api-tokens)
{% endcontent-ref %}

{% content-ref url="api-tokens/edit-api-token" %}
[edit-api-token](https://docs.platform.softwareone.com/modules-and-features/settings/api-tokens/edit-api-token)
{% endcontent-ref %}

{% content-ref url="api-tokens/copy-api-token" %}
[copy-api-token](https://docs.platform.softwareone.com/modules-and-features/settings/api-tokens/copy-api-token)
{% endcontent-ref %}

{% content-ref url="api-tokens/delete-api-token" %}
[delete-api-token](https://docs.platform.softwareone.com/modules-and-features/settings/api-tokens/delete-api-token)
{% endcontent-ref %}

{% content-ref url="api-tokens/enable-or-disable-api-token" %}
[enable-or-disable-api-token](https://docs.platform.softwareone.com/modules-and-features/settings/api-tokens/enable-or-disable-api-token)
{% endcontent-ref %}