API tokens

API tokens allow external systems to authenticate to herbe.calendar's API without using a user account. Common uses include BI dashboards that pull calendar or activity data, export scripts, and custom integrations.

Tokens are managed at Admin → Tokens.

Creating a token

1. Click + New Token.
2. Enter a name that describes the integration (e.g. "PowerBI export", "custom webhook receiver").
3. Select a scope:
   • Read-only — can query data but cannot create, update, or delete anything.
   • Read/write — full API access. Use only when the integration needs to write.
4. Optionally set an expiry date. Tokens without an expiry remain active until manually revoked.
5. Click Create.

The token value is shown exactly once at creation. Copy it to a secure location immediately — it cannot be retrieved later. If you lose it, revoke the token and create a new one.

Using tokens

Pass the token in the Authorization header as a Bearer token:

Authorization: Bearer <token>

Refer to your BI tool's connector documentation for which endpoint to target. For data export scenarios, see Analytics and BI.

Revoking a token

Find the token in the list and click Revoke. This takes effect immediately — any request using that token receives a 401 response. If you need uninterrupted access, create a replacement token and update the integration before revoking the old one.