Authorization header.
Generating API Keys
- Navigate to Administration > API Keys.
- Click Generate New Key.
- Select the key type:
- Personal Access Token (PAT): Inherits the permissions of the creating user.
- Service Account Key: Scoped token intended for CI/CD pipelines, automation scripts, and SIEM forwarders.
- Set token scopes (e.g.,
findings:read,scans:trigger,assets:write). - Copy the generated secret immediately. Tokens are displayed only once.