Authentication

Most MuninX API endpoints require a bearer token.

Create a personal API token

Admins, agents, and customers can create personal API tokens:

1. Sign in to MuninX.
2. Open Settings and select the API Tokens tab.
3. Select Create token.
4. Enter a descriptive name for the script or integration that will use the token.
5. Copy the token, store it securely, and select I have saved this token.

The raw token is shown only once. If you lose it, create a replacement token and update the integration that uses it.

Personal API tokens access MuninX as the user who created them. Requests have the same tenant scope and role permissions as that user.

Authenticate a request

Send the token in the Authorization header:

Authorization: Bearer <token>

Tenant and role scope

Authenticated requests are scoped by the caller’s tenant and role. Admins, agents, and customers may see different records or have different write permissions for the same endpoint.

For example, ticket list and analytics responses are filtered to the records the authenticated user can access.

Revoke a token

Delete a token from Settings > API Tokens when an integration no longer needs it or if the token may have been exposed. Deleting a token revokes its access immediately.

For programmatic token management, see the API reference for creating, listing, and deleting personal API tokens. The raw token returned when creating a token is available only in that response.